A business process-driven approach to security engineering

Proceedings - International Workshop on Database and Expert Systems Applications, DEXA

Volumn 2003-January, Issue , 2003, Pages 477-481

  Mana A ^a   Montenegro, J A ^a   Rudolph, C ^b   Vivas, J L ^c  

^a UNIVERSITY OF MÁLAGA   (Spain)

^b FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY SIT   (Germany)

^c HEWLETT PACKARD LABORATORIES   (United Kingdom)

Author keywords

Computer science; Computer security; Context modeling; Cryptographic protocols; Data security; Design engineering; Humans; Laboratories; Programming; Software systems

Indexed keywords

COMPUTER PROGRAMMING; COMPUTER SCIENCE; EXPERT SYSTEMS; FORMAL METHODS; LABORATORIES; MATHEMATICAL PROGRAMMING; SECURITY OF DATA; SECURITY SYSTEMS;

CONTEXT MODELING; CRYPTOGRAPHIC PROTOCOLS; DESIGN ENGINEERING; HUMANS; SOFTWARE SYSTEMS;

COMPUTER SYSTEMS PROGRAMMING;

EID: 33750048791     PISSN: 15294188     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DEXA.2003.1232069     Document Type: Conference Paper

References (19)

1. http://www.casenet-eu.org.
2. G. Brose, M. Koch, and K.-P. Löhr. Integrating security policy design into the software development process.Technical Report B-01-06, Institut für Informatik,Freie Universität Berlin, Nov. 2001.
3. M. Broy and K. Stlen. Specification and Development of Interactive Systems - FOCUS on Streams, Interfaces and Refinement. Springer, 2000. To appear.
4. P. Coad. Object-oriented patterns. Communications of the ACM, 35(9):153-159, Sept. 1993.
5. B. Curtis, M. Kellner, and J. Over. Process Modeling. Communications of the ACM, 35(9):75-90, Sept. 1992.
6. P. T. Devanbu and S. G. Stubblebine. Software engineering for security. In Proceedings of the 22th International Conference on Software Engineering (ICSE-00), pages 227-240, NY, June 4-11 2000. ACM Press.
7. G. Dhillon. Managing Information System Security. Macmillan education, Limited, 1997.
8. S. Eilenberg. Automata, Languages and Machines. Academic Press, New York, 1974.
9. H.-E. Eriksson and M. Penker. Business Modelling with UML: Business Patterns at Work. John Wiley & Sons, 2000.
10. E. Gamma, R. Helm, R. Johnson, and J. Vlissides. Design Patterns. Addison Wesley, Reading, Mass., 1995.
11. R. Grimm and P. Ochsenschläger. Binding Cooperation, A Formal Model for Electronic Commerce. Computer Networks, 37:171-193, 2001.
12. S. Gürgens, P. Ochsenschläger, and C. Rudolph. Authenticity and provability, a formal framework. In Infrastructure Security Conference InfraSec 2002, volume 2437 of LNCS, pages 227-245. SV, 2002.
13. J. Jürjens. Towards development of secure systems using UMLsec. Lecture Notes in Computer Science, 2029, 2001.
14. H. Mantel. Possibilistic definitions of security - an assembly kit. In Proceedings of the IEEE Computer Security Foundations Workshop, pages 185-199, 2000.
15. A. W. Röhm, G. Herrmann, and G. Pernul. A language for modelling secure business transactions. In IEEE Annual Computer Security Application Conference (ACSAC'99), Phoenix, USA, Dec. 1999.
16. B. Schneier. Secrets and Lies: Digital Security in a Networked World. John Wiley and Sons, Inc., New York, NY, USA, 2000.
17. M. Schumacher and U. Roedig. Security engineering with patterns. In Pattern Languages of Programs 2001, Monticello, IL, 2001.
18. M. Siponen. Designing secure information systems and software. Academic dissertation, University of Oulo, 2002.
19. R. Vaugh, R. Henning, and K. Fox. An empirical study of industrial security engineering practices. Journal of Systems and Software, Nov. 2001.