An AHP-based framework for quality and security evaluation

Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009

Volumn 3, Issue , 2009, Pages 405-411

  Casola, V ^a   Fasolino, A R ^a   Mazzocca, N ^a   Tramontana, P ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

EVALUATION FRAMEWORK; META MODEL; SECURITY EVALUATION; SERVICE FUNCTIONALITIES;

NETWORK SECURITY; RISK PERCEPTION;

QUALITY CONTROL;

EID: 70849094182     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSE.2009.391     Document Type: Conference Paper

References (20)

1. B.W. Boehm, J.R. Brown, J.R. Kaspar et al. Characteristics of Software Quality. New York, NY: North-Holland Publishing Company, 1978.
2. V. Casola, A. Mazzeo, N. Mazzocca, M. Rak, "An innovative Policybased Cross Certification methodology for Public Key Infrastructures" , proc. of the 2nd European PKI Workshop: Research and Applications, EuroPKI 2005. Pp. 100-117. Lecture Notes in Computer Science, Springer-Verlag.
3. V. Casola, A. Mazzeo, N. Mazzocca, M. Rak, "A SLA evaluation methodology in Service Oriented Architectures", proc. of Quality of Protection Workshop 2005 Springer-Verlag.
4. V. Casola, A. Mazzeo, N. Mazzocca, V. Vittorini, "A security metric for public key infrastructures", In Journal of Computer Security, January 2007, IOSPress.
5. A. De Lucia, A.R. Fasolino, E. Pompella, "A decisional framework for legacy system management", proc. of the IEEE International Conference on Software Maintenance, 2001. IEEE CS Press, pp. 642 - 651.
6. DoD (Department of Defense), "Trusted Computer System Evaluation Criteria", 26 December 1985 (Orange Book). European Communities - Commission. ITSEC: Information Technology Security Evaluation Criteria; (Provisional Harmonised Criteria, Version 1.2, 28 June 1991) Office for Official Publications of the European Communities, Luxembourg 1991
7. N. E. Fenton, S. L. Pfleeger, Software Metrics-A Rigorous and Practical Approach, 2nd ed., 1997, International Thomson Computer Press.
8. Harris Corporation, "Information Assurance Benchmark Analysis Study Final Report", 21 October 1999.
9. ISO/IEC Std. 9126, Information Technology - Software Product Evaluation - Quality Characteristics and Guidelines for their Use, Geneva, Switzerland, 1991.
10. J. McCall, P. Richards, G. Walters, "Factors in software quality" Technical Report 77CIS02, Rome Air Development Center, 1977.
11. N. Oldham, K. Verma, A Sheth, F. Hakimpour, "Semantic WSAgreement Partner Selection", proc. of the 15th International Conference on World Wide Web, WWW '06. ACM Press, New York, NY, 697-706.
12. QME: a Quality Model Editor, available at: http://www.seclab.unina.it/ uploads/publications/QME.zip.
13. R. Ronda, R. Henning, "Security Service Level Agreements: Quantifiable Security for the Enterprise?", ACM proc. of New Security Paradigm Workshop 1999, Ontario, Canada. Pp.54-60.
14. T.L. Saaty, "How to make a decision: the analytic hierarchy process", European Journal of Operational Research, 1990. Vol. 48, n.1, Elsevier, pp. 9- 26.
15. A. von Mayrhauser, Software Engineering- Methods and Management, Academic Press, inc., 1990.
16. W3C Working Group. Web Services Architecture, Note 11 February 2004. Available at http://www.w3.org/TR/ws-arch/.
17. WS-Agreements specification. Web Services Agreement Specification, version 2005/09. Available at http://www.gridforum.org/Public-Comment-Docs/ Documents/Oct-2005/WSAgreementSpecificationDraft050920. pdf.
18. WS-Security Web Services Security: SOAP Message Security 1.1 http://www.oasis-open.org/committees/download.php/16790/wss-v1. 1-specos-SOAPMessageSecurity.pdf.
19. WS-Trust specification. Web Services Trust Language. Available at http://specs.xmlsoap.org/ws/2005/02/trust/WS-Trust.pdf.
20. L. Zhu, A. Aurum, I. Gorton and R. Jeffery, "Tradeoff and Sensitivity Analysis in Software Architecture Evaluation Using Analytic Hierarchy Process", Software Quality Journal, Springer Netherlands, Volume 13, Number 4/December, 2005.