Integrating Security and Systems Engineering: Towards the Modelling of Secure Information Systems
Mouratidis, Haralambos, Giorgini, Paolo and Manson, Gordon 2003. Integrating Security and Systems Engineering: Towards the Modelling of Secure Information Systems.
|Authors||Mouratidis, Haralambos, Giorgini, Paolo and Manson, Gordon|
Security is a crucial issue for information systems. Traditionally, security is considered after the definition of the system. However, this approach often leads to problems, which translate into security vulnerabilities. From the viewpoint of the traditional security paradigm, it should be possible to eliminate such problems through better integration of security and systems engineering. This paper argues for the need to develop a methodology that considers security as an integral part of the whole system development process. The paper contributes to the current state of the art by proposing an approach that considers security concerns as an integral part of the entire system development process and by relating this approach with existing work. The different stages of the approach are described with the aid of a case study; a health and social care information system.
|Keywords||secure information systems; systems engineering|
|Accepted author manuscript|
|Publication process dates|
|Deposited||14 Jan 2010|
|Web address (URL)||http://dx.doi.org/10.1007/3-540-45017-3_7|
0views this month
2downloads this month