Analysis of modern IS security development approaches: Towards the next generation of social and adaptable ISS methods

Information and Organization

Volumn 15, Issue 4, 2005, Pages 339-375

  Siponen, Mikko T ^a  

^a UNIVERSITY OF OULU   (Finland)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 24644436394     PISSN: 14717727     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infoandorg.2004.11.001     Document Type: Article

References (78)

1. R. Anderson Why cryptosystems fail Communication of the ACM 37 11 1993 32-44
2. H. Armstrong Managing information security in healthcare - an action research experience Proceedings of the Sixteen Annual Working Conference on Information Security 2000
3. J. Backhouse & G. Dhillon Structures of responsibilities and security of information systems European Journal of Information Systems 5 1 1996 2-10
4. V.R. Basili & F. Lanubile Building knowledge through families of experiments IEEE Transactions on Software Engineering 25 4 1999 456-473
5. R. Baskerville Designing information systems security John Wiley Information Systems Series 1988
6. R. Baskerville Logical controls specification: An approach to information systems security Systems Development for Human Progress 1989 North-Holland Amsterdam 241-256
7. R. Baskerville The developmental duality of information systems security Journal of Management Systems 4 1 1992 1-12
8. R. Baskerville Information systems security design methods: Implications for information systems development ACM Computing Surveys 25 4 1993 375-414
9. R. Baskerville & A.T. Wood-Harper Diversity in information systems action research methods European Journal of Information Systems 7 2 1998 90-107
10. B.W. Boehm Software engineering IEEE Transactions on Computers 25 12 1976 1226-1241
11. B.W. Boehm A spiral model of software development and Enhancement IEEE Computer 21 5 1988 61-72
12. H.A.S. Booysen & J.H.P. Eloff A Methodology for the development of secure Application Systems Proceeding of the 11th IFIP TC11 International Conference on Information Security 1995
13. G. Burrell & G. Morgan Sociological Paradigms and Organizational Analysis 1979 Heinemann London, UK
14. P. Checkland Systems thinking, systems practice 1985 Wiley Chichester
15. W.F. Chua Radical developments in accounting thought Accounting Review 61 5 1986 583-598
16. J.B. Cunningham Case study principles for different types of cases Quality and Quantity 31 1997 401-423
17. G.B. Davis A research perspective for information systems and example of emerging area of research Information Systems Frontiers 1 1999 195-203
18. P. Denning D. Comer D. Gries M. Mulder A. Tucker & A.J. Turner et al. Computing as a discipline: Final report of the task force on the core of computer science Communications of the ACM 32 1 1989 9-23
19. G. Dhillon & J. Backhouse Current directions in IS security research: Toward socio-organizational perspectives Information Systems Journal 11 2 2001 127-153
20. Dobson, J. (1990). A methodology for analysing human and computer related issues in secure systems. Proceedings of the Sixth IFIP International Conference on Computer Security and Information, Integrity, Espoo, Finland.
21. K.M. Eisenhardt Building theories from case study research Academy of Management Review 14 4 1989 532-550
22. Ellmer, E., Pernul, G., & Kappel, G. (1995). Object-Oriented Modeling of Security Semantics. In: Proceedings of the 11th Annual Computer Society Applications Conference (ACSAC'95).
23. M.M. Eloff & S.H. Solms von Information security management: A hierarchical framework for various approaches Computers and Security 19 2000a 243-256
24. R. Galliers Choosing information systems research approach In R. Galliers (Ed.) Information systems research: Issues, methods and practical guidelines 1992 Blackwell Scientific Publications Oxford, UK 144-162
25. R.D. Galliers & F.F. Land Choosing appropriate information systems research methodologies Communication of the ACM 30 11 1987 900-902
26. D.L. Goodhue & D.W. Straub Security concerns of systems users: A study of perceptions of the adequacy of security measures Information and Management 20 1 1991 13-27
27. R.M. Hare Moral thinking: Its levels, methods and point 1981 Oxford University Press UK
28. G. Herrmann & G. Pernul Viewing business-process security from different perspectives International Journal of Electronic Commerce 3 3 1999 89-103
29. R. Hirschheim IS epistemology: An historical perspective In: E. Mumford (Ed.) Research methods in information systems 1985 North-Holland The Netherlands 13-36
30. R. Hirschheim H.K. Klein & K. Lyytinen Information systems development and data modelling: Conceptual and philosophical foundations 1995 Cambridge University Press UK
31. R. Hirschheim H.K. Klein & K. Lyytinen Exploring the intellectual structures of information systems development: A social action theoretic analysis Accounting, Management and Information Technologies 6 1-2 1996 1-64
32. J. Hitchings Achieving an integrated design: The way forward for information security Proceedings of the IFIP TC11 11th international conference on information security 1995
33. J. Hitchings A Practical solution to the complex human issues of information security design Proceedings of the 12th IFIP TC11 International Conference on Information Security, IFIP/SEC'96 1996
34. W.S. Humphrey Characterizing the software process: A maturity framework IEEE Software 5 2 1988 73-79
35. W. Hutchinson & M. Warren Using the viable systems model to develop an understanding information system security threats to an organisation Proceedings of the 1st Australian Information Security Management Workshop 2000
36. J. Iivari A paradigmatic analysis of contemporary schools of IS development European Journal of Information Systems 1 4 1991 249-272
37. J. Iivari & R. Hirschheim Analyzing information systems development: a comparison and analysis of eight is development approaches Information Systems 21 7 1996 551-575
38. J. Iivari R. Hirschheim & H.K. Klein A paradigmatic analysis contrasting information systems development approaches and methodologies Information Systems Research 9 2 1998 164-193
39. J. Iivari R. Hirschheim & H.K. Klein A dynamic framework for classifying information systems development methodologies and approaches Journal of Management Information Systems 17 3 2001 179-218
40. J. Iivari & P. Kerola A Sociocybernetic framework for the feature analysis of information In T.W. Olle H.G. Sol & C.J. Tully (Eds.) Information systems design methodologies: A feature analysis 1983 North-Holland The Netherlands 87-139
41. H.L. James Managing information systems security: A soft approach Proceedings of the Information Systems Conference of New Zealand 1996 IEEE Society Press
42. M.A. Jenkins Research methodologies and MIS research In E. Mumford et al. (Ed.) Research methodologies in information systems 1985 Elsevier Science Publisher B.V. (North Holland) 103-117
43. P. Järvinen Research questions guiding selection of an appropriate research method In Hansen Bichler & Mahrer (Eds.) Proceedings of ECIS2000, 3-5 July 2000 Vienna University of Economics and Business Adminstration Wien 124-131
44. Karya, M., Kokolakis, S., & Kiountouzis, E. (2001). Redefining Information Systems Security: Viable Information Systems. In Proceedings of the IFIP TC11 16th International Conference on Information Security (IFIP/SEC'01), June 11-13, Paris, France.
45. H. Klein & K. Lyytinen The poverty of scientism in information systems Proceedings of the IFIP WG 8.2. Working Conference on Research methods in information systems 1985 Elsevier Science Publisher Amsterdam p. 131-161
46. H.K. Klein & M.D. Myers A set of principles for conducting and evaluating interpretive field studies in information systems MIS Quarterly 23 1 1999 67-94
47. C.E. Landwehr Formal models for computer security ACM Computing Survey 13 3 1981 247-278
48. S.T. March & G.G. Smith Design and natural science research on information technology Decision Support Systems 15 4 1995 251-266
49. J.A. McDermid & K.H. Bennett Software engineering research: A critical appraisal IEE Proceedings of Software 146 4, Aug. 1999 179-186
50. J. McDermott & C. Fox Using abuse case models for security requirements Proceedings of the 15th Annual Computer Security Applications Conference (ACSAC) 1999
51. Nance, W.D., & Straub, D.W. (1988). An Investigation into the Use and Usefulness of Security Software in Detecting Computer Abuse. Proceedings of the Ninth International Conference on Information Systems, J.I. DeGloss and M.H. Olson (eds.), Minneapolis, MN, 1988, pp. 283-294.
52. J.F. Nunamaker M. Chen & T.D.M. Purdin Systems development in information systems research Journal of Management Information Systems 7 3 1991 89-106
53. D.P. O'Leary Teamwork: Computational science and applied mathematics IEEE Computational Science and Engineering 4 2, April-June 1997 13-18
54. D.L. Parnas Software engineering programs are not computer science programs IEEE Software 16 6, Nov.-Dec 1999 19-30
55. G. Pernul Security constraint processing during multilevel secure database design Proceedings of the 8th Annual Computer Security Applications Conference 1992
56. G. Pernul & G. Quirchmayr Organizing MLS databases from a data modeling point of view Proceedings of the 10th Annual Computer Security Applications Conference 1994
57. G. Pernul A.M. Tjoa & W. Winiwarter Modeling data secrecy and integrity Data and knowledge engineering vol. 26 1998 North Holland pp. 291-308
58. S.H. Pfleeger Albert Einstein and empirical software engineering IEEE Computer 32 10 1999 32-37
59. K.R. Popper Normal science and its dangers In I. Lakatos & A. Musgrave (Eds.) Criticism and the growth of knowledge 1970 Cambridge University Press UK 51-58
60. A.W. Röhm & G. Pernul COPS: A model and infrastructure for secure and fair electronic markets Decision Support Systems 29 4 2000 434-455
61. A. Sasse S. Brostoff & D. Weirich Transforming the 'weakest link' - a human/computer interaction approach to usable and effective security BT Technology Journal 19 3 2001 122-131
62. H. Sharp H. Robinson & M. Woodman Software engineering: Community and culture IEEE Software 17 1, Jan.-Feb. 2000 40-47
63. M.T. Siponen Critical analysis of different approaches to minimizing user-related faults in information systems security: Implications for research and practice Information Management and Computer Security 8 5 2000 197-209
64. M.T. Siponen & R. Baskerville A new paradigm for adding security into IS development methods In J. Eloff L. Labuschagne R. von Solms & G. Dhillon (Eds.) Advances in information security management and small systems security 2001 Kluwer Academic Publishers MA 99-111
65. M.T. Siponen & T. Vartiainen Unauthorized copying of software and levels of moral development: Implications for research and practice Information Systems Journal 14 4 2004 387-407
66. G.W. Smith The semantic data model for security: Representing the security semantics of an application Proceedings of the Sixth International Conference on Data Engineering 1989
67. R. Solms von Information security management: Why standards are important Information Management and Computer Security 7 1 1999 50-58
68. M. Spruit & P.H. Samwel Risk analysis on Internet connection Proceedings of the IFIP TC11 WG11.2/WG11.2 Seventh Annual Working Conference on Information Management and Small Systems Security 1999
69. D.W. Straub Validating Instruments in MIS Research MIS Quarterly 13 2 1989 147-169
70. D.W. Straub Effective IS security: An empirical study Information System Research 1 2 1990 255-277
71. D.W. Straub & R.J. Welke Coping with systems risk: Security planning models for management decision making MIS Quarterly 22 4 1998 441-464
72. R. Strens & J. Dobson How responsibility modeling leads to security requirements Proceedings of the 1992 and 1993 ACM SIGCAS New Security Paradigm Workshop 1993
73. R.K. Thomas & R.S. Sandhu Conceptual foundations for a model of task-based authorizations Proceedings of the 7th IEEE Computer Security Foundations Workshop 1994
74. J.G. Walls G.R. Widmeyer & O.A.E. Sawy Building and Information System Design Theory for Vigilant EIS Information System Research 3 1 1992 36-58
75. G. Walsham The Emergence of Interpretivism in IS research Information Systems Research 6 4 1996 376-394
76. J. Webster & R.T. Watson Analyzing the past to prepare for future: writing a literature review MIS Quarterly 6 2 2002 xiii-xxii
77. Werth, J., & Werth, L. (1991). Directions in software engineering education. Proceedings of the 13th international conference on Software engineering, Austin, Texas, US, pp. 353-357.
78. C.C. Wood W.W. Banks S.B. Guarro A.A. Garcia V.E. Hampel & H.P. Sartorio Computer security: A comprehensive controls checklist 1987 John wiley and Sons New York