Holistic security requirement engineering for electronic commerce

Computers and Security

Volumn 23, Issue 1, 2004, Pages 63-76

  Zuccato, Albin ^a  

^a KARLSTAD UNIVERSITY   (Sweden)

Author keywords

Electronic commerce; Holistic requirements engineering; Risk analysis; Security requirement; Security requirement engineering

Indexed keywords

DATA PRIVACY; ELECTRONIC COMMERCE; INFORMATION TECHNOLOGY; RISK ASSESSMENT;

HOLISTIC REQUIREMENTS ENGINEERING; RISK ANALYSIS; SECURITY REQUIREMENT ENGINEERING;

SECURITY OF DATA;

EID: 1242263785     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0167-4048(04)00065-3     Document Type: Article

References (29)

1. Beck K. Extreme programming explained. 2000;Addison Wesley.
2. Bray I.K. An introduction to requirements engineering. 2002;Addison Wesley.
3. Broder J. Risk analysis and the security survey. 2nd ed. 2000;Butterworth Heinemann.
4. BSI. Basic protection manual. Technical report, Bundesamt fuer Sicherheit in der Informationstechnologie; 2002.
5. Gerber M., von Solms R. From risk analysis to security requirements. Comput Secur. 20:(7):2000;577-584.
6. Hammer M., Champy J. Reengineering the corporation: a manifesto for business revolution. 1994;HarperBusiness.
7. Holbein R., Teufel S., Bauknecht K. The use of business process models for security design in organisations. Katzikas S., Gritzalis D. Information systems security: facing the information society of the 21st century. IFIP SEC 96. 1996;Chapman Hall, London.
8. IEEE. IEEE standard glossary of software engineering terminology, IEEE Std. 610.12; 1990.
9. ISO/IEC TR 13335-1:1996. Information technology - guidelines for the management of IT security - Part 1: concepts and models for IT security. 1996;International Standard Organization.
10. ISO/IEC TR 13335-2:1997. Information technology - guidelines for the management of IT security - Part 2: managing and planning IT security. 1997;International Standard Organization.
11. ISO/IEC TR 13335-3:1998. Information technology - guidelines for the management of IT security - Part 3: techniques for the management of IT security. 1998;International Standard Organization.
12. ISO 9000:2000. Quality management systems - fundamentals and vocabulary. 2000;International Standard Organization.
13. ISO/IEC 17799:2000. Information technology - code of practice for information security management. 2000;International Standard Organization.
14. Jacobson I., Booch G., Rumbaugh J. The unified software development process. Object technology series. 1999;Addison Wesley Longman.
15. Kokolakis S., Demopoulos A., Kiountouzis E. The use of business process modelling in information systems security analysis and design. Inform Manag Comput Secur. 8:(3):2000;107-116.
16. Leffingwell D., Widrog D. Managing software requirements: a unified approach. 2000;Addison Wesley.
17. McDermott J., Fox C. Using abuse case models for security requirements analysis. Proceeding of the 15th Annual Computer Security Applications Conference. 1999;. p. 55-64. IEEE.
18. Mostert D., von Solms S. A technique to include computer security, safety, and resilience requirements as part of the requirement specification. J Syst Software. 31:1995;45-53.
19. Österle H., Winter R. Business engineering - Auf dem Weg zum Unternehmen des Informationszeitalters. 2000;Springer, Berlin.
20. Paulk MC, Curtis B, Chrissis MB, Weber CV. Capability maturity model - sm, version 1.1. Technical report, Software Engineering Institute; 1993.
21. Pfleeger S.L. A framework for security requirements. Comput Secur. 10:(6):1991;515-523.
22. Robertson S., Robertson J. Mastering the requirements process. 1999;Addison Wesley.
23. Schneider F.B. Trust in cyberspace. 1999;National Academy Press.
24. von Solms B. Information security - a multidimensional discipline. Comput Secur. 20:2001;504-508.
25. SSE-CMM. Systems Security Engineering Capability Maturity Model 2.0. SSE-CMM Project; 1999.
26. Tettero O., Out D., Franken H., Schot J. Information security embedded in the design of telematics systems. Comput Secur. 16:(2):1997;145-164.
27. Yngström L. A systemic-holistic approach to academic programmes in IT security. PhD thesis, Stockholm University; 1996.
28. Zuccato A. A Holistic Information Security Management Framework applied for electronic and mobile commerce. Fischer-Hübner S., Jonsson E. Proceedings of Seventh Nordic Workshop on Secure IT Systems - Towards Secure and Privacy-Enhanced Systems. 2002.
29. Zuccato A. Towards a systemic-holistic security management. Licenciate thesis, Karlstad University Studies; 2002b.