Incorporating database systems into a secure software development methodology

Proceedings - International Workshop on Database and Expert Systems Applications, DEXA

Volumn , Issue , 2008, Pages 310-314

  Fernandez, Eduardo B ^a   Jurjens, Jan ^b   Yoshioka, Nobukazu ^c   Washizaki, Hironori ^d  

^a Florida Atlantic University   (United States)

^b OPEN UNIVERSITY   (United Kingdom)

^c NATIONAL INSTITUTE OF INFORMATICS   (Japan)

^d WASEDA UNIVERSITY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

ARCHITECTURAL LEVELS; COMMUNICATION PROTOCOLS; CONCEPTUAL MODELS; DESIGN ARTIFACTS; DESIGN ASPECTS; INFORMATION ASSETS; PERFORMANCE ASPECTS; SECURE ARCHITECTURES; SECURE SOFTWARE DEVELOPMENTS; SECURITY POLICIES; SECURITY REQUIREMENTS;

ADMINISTRATIVE DATA PROCESSING; APPLICATIONS; COMMUNICATION; DECISION SUPPORT SYSTEMS; EXPERT SYSTEMS; PROBLEM SOLVING; SOFTWARE DESIGN;

DATABASE SYSTEMS;

EID: 57849090099     PISSN: 15294188     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DEXA.2008.100     Document Type: Conference Paper

References (17)

1. M. M. Astrahan et al., "System R: Relational Approach to Database Management.", ACM Trans. on Database Syst, vol. 1, No 2, 1976, 97-137
2. B. Best, J. Jurjens and B. Nuseibeh, Model-based Security Engineering of Distributed Information Systems using UMLsec, 29th International Conference on Software Engineering (ICSE 2007), ACM, 2007, pages 581-590
3. S. Castano, M. Fugini, G. Martella, and P. Samarati, Database security, Addison-Wesley, 1994.
4. E.B. Fernandez, T. Sorgente, and M.M. Larrondo-Petrie, "A UML-based methodology for secure systems: The design stage", Procs. of the Third International Workshop on Security in Information Systems (WOSIS-2005), Miami, May 24-25, 2005, 207-216.
5. E. Fernández-Medina and M. Piattini, "Designing secure databases". Information and Software Technology, vol. 47, No 7, 2005, 463-477.
6. E. B. Fernandez, M.M. Larrondo-Petrie, T. Sorgente, and M. Van Hilst, "A methodology to develop secure systems using patterns", Chapter 5 in "Integrating security and software engineering: Advances and future vision", H. Mouratidis and P. Giorgini (Eds.), IDEA Press, 2006, 107-126.
7. E.B. Fernandez, N. Yoshioka, H. Washizaki, and J. Jurjens, "Using security patterns to build secure systems", position paper in the 1st Int. Workshop on Software Patterns and Quality (SPAQu'07), Nagoya, Japan, December 3, 2007, collocated with the 14th Asia-Pacific Software Engineering Conference (APSEC).
8. E.B. Fernandez and X.Y. Yuan, "Securing analysis patterns", Procs. of the 45th ACM Southeast Conference (ACMSE 2007), March 23-24, 2007, Winston-Salem, North Carolina.
9. M. Fugini, "Secure database development methodologies", in Database Security: Status and Prospects, C. E. Landwehr (Ed.), Elsevier Science Publishers B.V. (North-Holland), 1988, 103-129.
10. J. Jurjens, Secure systems development with UML, Springer-Verlag, 2004.
11. J. Jurjens, "Sound Methods and Effective Tools for Model-based Security Engineering with UML", 27th International Conference on Software Engineering (ICSE 2005), ACM, 2005, pages 322-331.
12. J. Jurjens and E.B. Fernandez, "Secure database development", to appear in the Encyclopedia of Database Systems, Ling Liu and Tamer Oszu (eds.), Springer Verlag, Berlin, Germany.
13. R. Sandhu, E.J. Coyne, H.L. Feinstein, and C.E. Youman, "Role-Based Access Control Models", IEEE Computer, Vol. 29, No.2, IEEE Press, 1996, 38-47
14. M. Schumacher, E.B. Femandez, D. Hybertson, F. Buschmann, and P. Sommerlad, Security Patterns: Integrating security and systems engineering, J. Wiley & Sons, 2006.
15. M. Stonebraker, E. Wong, P. Kreps, and G. Held, "The Design and Implementation of INGRES", ACM Trans. on Database Syst., vol. 3, 1976, 189-222.
16. N. Yoshioka, S. Honiden, and A. Finkelstein, "Security patterns: A method for constructing secure and efficient inter-company coordination systems", Procs. of the 8th Int. IEEE Enterprise Distributed Object Computing Conference, 2004.
17. N. Yoshioka, "A development method based on security patterns", Presentation, NII, Tokyo, Japan, 03/29/06.