Secure information systems development - A survey and comparison

Computers and Security

Volumn 24, Issue 4, 2005, Pages 308-321

  Villarroel, Rodolfo ^a   Fernández Medina, Eduardo ^b   Piattini, Mario ^b  

^a UNIVERSIDAD CATÓLICA DEL MAULE   (Chile)

^b UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

Author keywords

Comparison framework; Confidentiality; Multidimensional modeling; Secure information systems development; Security; Security design; UML

Indexed keywords

COMPUTER SOFTWARE; COMPUTER SYSTEM FIREWALLS; DATABASE SYSTEMS; PROBLEM SOLVING; ROUTERS; SERVERS; SOFTWARE ENGINEERING;

SECURITY PROBLEMS; SOFTWARE DESIGN; SOFTWARE PRODUCTS; SYSTEMS DEVELOPMENT;

SECURITY OF DATA;

EID: 19944367288     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.09.011     Document Type: Article

References (25)

1. C. Artelsmair, W. Essmayr, P. Lang, R. Wagner, and E. Weippl CoSMo: an approach towards conceptual security modeling Database and expert systems applications: 13th international conference (DEXA 2002) 2002 Springer-Verlag Air-en-Provence, France
2. F. Brooks The mythical man month: essays on software engineering 1995 Addison-Wesley
3. S. Castano, M. Fugini, G. Martella, and P. Samarati Database security 1995 Addison-Wesley
4. G. Dhillon Information security management: global challenges in the new millennium 2001 Idea Group Publishing
5. Federal Trade Commission (U.S.). Health Insurance Portability and Accountability Act (HIPPA); 1996.
6. Fernández EB. A methodology for secure software design. In: The 2004 international conference on software engineering research and practice (SERP'04). Las Vegas, Nevada, USA; 2004.
7. E. Fernández-Medina, and M. Piattini Designing secure database for OLS Database and expert systems applications: 14th international conference (DEXA 2003) 2003 Springer Prague, Czech Republic
8. E. Fernández-Medina, J. Trujillo, R. Villarroel, and M. Piattini Extending the UML for designing secure data warehouses 23rd international conference on conceptual modeling ER2004 2004 Springer-Verlag Shanghai, China
9. Georg G, Ray I, France R. Using aspects to design a secure system. In: Eighth IEEE international conference on engineering of complex computer systems (ICECCS'02). Greenbelt, Maryland, USA; 2002.
10. A. Ghosh, C. Howell, and J. Whittaker Building software securely from the ground up IEEE Software 19 1 2002 14 16
11. A. Hall, and R. Chapman Correctness by construction: developing a commercial secure system IEEE Software 19 1 2002 18 25
12. IBM. Security: IBM to provide multilevel security on the zSeries mainframe; 2004.
13. ISO/IEC. ISO/IEC 15408-1. Information technology. Security techniques. Evaluation criteria for TI security. Part I: introduction and general model. Switzerland; 1999.
14. I. Jacobson, G. Booch, and J. Rumbaugh The unified software development process 1999 Addison Wesley
15. J. Jürjens UMLsec: extending UML for secure systems development J. Jézéquel H. Hussmann S. Cook UML 2002 - the unified modeling language, model engineering, concepts and tools 2002 Springer Dresden, Germany 412 425
16. A. Khwaja, and J. Urban A synthesis of evaluation criteria for software specifications and specification techniques International Journal of Software Engineering and Knowledge Engineering 12 5 2002 581 599
17. J. Levinger Oracle label security. Administrator's guide Release 2 (9.2). Available from: http://www.csis.gvsu.edu/GeneralInfo/Oracle/network.920/a96578. pdf 2002
18. L. Liu, E. Yu, and J. Mylopoulos Security and privacy requirements analysis within a social setting 11th International requirements engineering conference 2003 IEEE Computer Society
19. D. Marks, P. Sell, and B. Thuraisingham MOMT: a multi-level object modeling technique for designing secure database applications Journal of Object-Oriented Programming 9 4 1996 22 29
20. G. McGraw Penetrate and patch is bad IEEE Software 2002 15
21. Priebe T, Pernul G. Towards OLAP security design - survey and research issues. In: 3rd ACM international workshop on data warehousing and OLAP (DOLAP'00). Washington DC, USA; 2000.
22. T. Priebe, and G. Pernul A pragmatic approach to conceptual modeling of OLAP security 20th International conference on conceptual modeling (ER 2001) 2001 Springer-Verlag Yokohama, Japan
23. Siponen M. Designing secure information systems and software (academic dissertation). In: Department of information processing science. OuLu, Finland: University of Oulo; 2002.
24. B. Thuraisingham, L. Schlipper, L. Samarati, T.Y. Lin, S. Jajodia, and C. Clifton Security issues in data warehousing and data mining: panel discussion Database Security XI: status and prospects 1998 3 16
25. J.L. Vivas, J. Montenegro, and J. López Towards a business process-driven framework for security engineering with the UML Information security, 6th international conference (ISC 2003) 2003 Springer-Verlag Bristol, UK