Functional requirements for secure code: the reference monitor and use case

INTRODUCTION Failure to incorporate security into systems requirements is a concern dating back at least a quarter of a century (Schell, Downey & Popek, 1973, Pipkin, 2000). Compounding this oversight […]
Information assurance, data security, and corresponding issues are traditionally presented in Systems Analysis and Design textbooks as non-functional requirements. Systems analysts can enforce secure design and code as one of the essential goals of systems analysis and design by using the Reference Monitor concept as a means of requirements and design specification. The application of the Reference Monitor during the early stages of systems requirements specification via the Use Case emphasizes that information assurance is a critical functional requirement.