Holistic security management framework applied in electronic commerce

Computers and Security

Volumn 26, Issue 3, 2007, Pages 256-265

  Zuccato, Albin ^a  

^a KARLSTAD UNIVERSITY   (Sweden)

Author keywords

Electronic commerce security; Holistic security management; Security engineering; Security management process; Security requirements

Indexed keywords

ELECTRONIC COMMERCE; HIERARCHICAL SYSTEMS; INFORMATION SYSTEMS; ITERATIVE METHODS; RISK MANAGEMENT;

ELECTRONIC COMMERCE SECURITY; HOLISTIC SECURITY MANAGEMENT; SECURITY ENGINEERING; SECURITY MANAGEMENT PROCESS; SECURITY REQUIREMENTS;

NETWORK SECURITY;

EID: 34248396442     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2006.11.003     Document Type: Article

References (25)

1. Björck F. Security Scandinavian style. Licentiate thesis, Stockholm University & Royal Institue of Technology; 2001.
2. Booysen H., and Eloff J. A methodology for the development of secure application systems. In: Eloff J.H.P., and von Solms S.H. (Eds). Information security - the next decade (1995), IFIP, Chapman & Hall. ASSDM 255-269
3. Brooks F.P.J. The mythical man-month (1995), Addison Wesley Longman [Anniversary edition]
4. Chaffe D. E-business and e-commerce management: strategy, management, and applications (2002), Pearson Education Limited
5. DTI, Coopers PW. Information security breaches survey 2004 technical report. Technical report, DTI, 2004.
6. EUD 95/46/EC. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. European Union, 1995.
7. Fischer-Hübner S. IT-security and privacy: design and use of privacy-enhancing security mechanisms. Lecture Notes in Computer Science (2001), Springer
8. Hitchings J. Achieving an integrated design: the way forward for information security. In: Eloff J.H.P., and von Solms S.H. (Eds). Information security - the next decade (1995), IFIP, Chapman & Hall 369-383
9. Holbein R., Teufel S., and Bauknecht K. The use of business process models for security design in organisations. In: Katzikas S., and Gritzalis D. (Eds). Information systems security: facing the information society of the 21st century, IFIP SEC 96 (1996), Chapman & Hall, London
10. ISO 17799. ISO/IEC 17799:2000. Information technology - ode of practice for information security management, International Organization for Standardization; 2000.
11. ISO 27001. ISO/IEC 27001:2005. Information technology - security techniques - information security management systems - requirements, International Organization for Standardization; 2005.
12. ISO 9000. ISO/IEC 9000:2000. Quality management systems - fundamentals and vocabulary, International Organization for Standardization; 2000.
13. Jacobson I., Booch G., and Rumbaugh J. The Unified Software Development Process. Object technology series (1999), Addison Wesley Longman
14. Jürjens J. Using umlsec and goal-trees for secure systems development. In: Symposium of applied computing (SAC 2002); 2002. p. 1026-31.
15. Österle H., and Winter R. Business Engineering - Auf dem Weg zum Unternehmen des Informationszeitalters (2000), Springer, Berlin
16. Paulk M. Extreme programming from a CMM perspective. IEEE Software 18 6 (2001) 19-26
17. Paulk MC, Curtis B, Chrissis MB, Weber CV. Capability maturity model - SE. Version 1.1, Technical report, Software Engineering Institute; 1993.
18. Schoderbek P., Schoderbek C., and Kefalas A. Management systems - conceptual considerations. 4th ed. (1990), Richard D. Irwin Inc.
19. SSE-CMM. Systems security engineering capability maturity model. SSE-CMM Project, v. 3.0 edition; 2003.
20. Trcek D. An integral framework for information systems security management. Computers & Security 22 4 (2003) 337-360
21. Vernik R., Blackburn T., and Bright D. Extending interactive intelligent workspace architectures with enterprise services. Internal publication at the School of Computer and Information Science (2003), University of South Australia
22. von Solms B. Information security - a multidimensional discipline. Computer & Security 20 (2001) 504-508
23. Zuccato A. Holistic security requirement engineering for electronic commerce. Computers & Security 23 1 (2004) 63-76
24. Zuccato A. A decision matrix approach to prioritize holistic security requirements in e-commerce. In: 20th IFIP information security conference - security and privacy in the age of ubiquitous computing. IFIP TC 11; 2005a.
25. Zuccato A. Holistic information security management framework - for electronic commerce. Doctoral thesis, Karlstad University Studies; 2005b.