When Security meets Software Engineering: A case of modelling secure information systems
Article
Mouratidis, Haralambos, Giorgini, Paolo and Manson, Gordon 2005. When Security meets Software Engineering: A case of modelling secure information systems. Information Systems. 30 (8), pp. 609-629.
Authors | Mouratidis, Haralambos, Giorgini, Paolo and Manson, Gordon |
---|---|
Abstract | Although security is a crucial issue for information systems, traditionally, it is considered after the definition of the system. This approach often leads to problems, which most of the times translate into security vulnerabilities. From the viewpoint of the traditional security paradigm, it should be possible to eliminate such problems through better integration of security and software engineering. This paper firstly argues for the need to develop a methodology that considers security as an integral part of the whole system development process, and secondly it contributes to the current state of the art by proposing an approach that considers security concerns as an integral part of the entire system development process and by relating this approach with existing work. The different stages of the approach are described with the aid of a real-life case study; a health and social care information system. |
Keywords | Information system design; Requirements analysis; Security engineering |
Journal | Information Systems |
Journal citation | 30 (8), pp. 609-629 |
ISSN | 0306-4379 |
Year | 2005 |
Accepted author manuscript | License CC BY-ND |
Web address (URL) | http://dx.doi.org/10.1016/j.is.2004.06.002 |
http://hdl.handle.net/10552/414 | |
Publication dates | |
Dec 2005 | |
Publication process dates | |
Deposited | 02 Dec 2009 |
Additional information | Citation: |
https://repository.uel.ac.uk/item/867wx
Download files
116
total views562
total downloads0
views this month2
downloads this month