1. When security meets software engineering: a case of modelling secure information systems
- Author
-
Haralambos Mouratidis, Paolo Giorgini, and Gordon A. Manson
- Subjects
Cloud computing security ,Computer science ,business.industry ,Standard of Good Practice ,Vulnerability ,Information security ,Computer security model ,Security testing ,Security information and event management ,Security engineering ,Information engineering ,Information security management ,Security service ,Hardware and Architecture ,Information security standards ,Software security assurance ,Information system ,Security through obscurity ,Security convergence ,Software engineering ,business ,Software ,Information Systems - Abstract
Although security is a crucial issue for information systems, traditionally, it is considered after the definition of the system. This approach often leads to problems, which most of the times translate into security vulnerabilities. From the viewpoint of the traditional security paradigm, it should be possible to eliminate such problems through better integration of security and software engineering. This paper firstly argues for the need to develop a methodology that considers security as an integral part of the whole system development process, and secondly it contributes to the current state of the art by proposing an approach that considers security concerns as an integral part of the entire system development process and by relating this approach with existing work. The different stages of the approach are described with the aid of a real-life case study; a health and social care information system.
- Published
- 2005
- Full Text
- View/download PDF