Requirements engineering of secure health communication systems

该项目的目标是更好地了解安全健康通信软件设计和规范的信息需求。研究项目的重点是提取需求、决策点以及实现这些决策自动化的可能性。在开发最低限度可行的产品时，公司应该始终满足隐私策略规则，这些规则将它们转换为软件需求和规范，这会给合作伙伴公司增加相当大的管理费用。这项研究使用一种混合的方法来确定最佳做法，以提供满足传输敏感用户数据的通信服务的安全需求的精确要求。该框架可供其他政府和行业组织培训和使用，以持续评估不断发展的软件的兼容性以及隐私和安全要求，以防止敏感信息通过软件泄露。

The goal of the project is to better understand the information needs for the design and specification of secure health communication software. The research project focuses on extracting requirements decision points and the potential for the automation of these decisions. While developing the minimum viable products the company should always meet the privacy policy rules which translating them to software requirements and specification adds a considerable amount of overhead to the partner company. The research uses a mixed method for identifying best practices for providing precise requirements that meet the security needs of a communication service which transfers sensitive user data. This framework can be trained and used for other governmental and industrial organizations for continuous evaluation of compatibility of the evolving software and the privacy and security requirements to prevent the leak of sensitive information through the software.