Towards the development of secure information systems: Security Reference Diagram and Security Attack Scenarios

Security is one of the main challenges that developers of information systems face. However, current methodologies for information system development do not provide enough evidence of integrating successfully security concerns throughout the whole range of the development process. In this paper, we provide an approach towards the solution of two of the problems
associated with the integration of security. Moreover, we describe how our approach can be integrated within the Tropos methodology and we illustrate it with the aid of a real-life example.