Using security attack scenarios to analyse security during information systems design

ICEIS 2004 - Proceedings of the Sixth International Conference on Enterprise Information Systems

Volumn , Issue , 2004, Pages 10-17

  Mouratidis, Haralambos ^a   Giorgini, Paolo ^b   Manson, Gordon ^c  

^a UNIVERSITY OF EAST LONDON   (United Kingdom)

^b UNIVERSITY OF TRENTO   (Italy)

^c UNIVERSITY OF SHEFFIELD   (United Kingdom)

Author keywords

Information systems analysis; Security, scenarios; Systems engineering methodologies

Indexed keywords

ALGORITHMS; COMPUTER SYSTEMS; ENTERPRISE RESOURCE PLANNING; JAVA PROGRAMMING LANGUAGE; MATHEMATICAL MODELS; MULTIMEDIA SYSTEMS; STANDARDS;

INFORMATION SYSTEM DEVELOPMENT (ISD); SCENARIOS; SYSTEM ENGINEERING METHODOLOGIES;

SECURITY OF DATA;

EID: 8444240069     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. th Conference on Advanced Information Systems (CAiSE-1994), The Netherlands.
2. Carroll, J.M., Rosson, M.B., 1991. Getting Around the Task-Artifact Cycle: How to Make Claims and Design by Scenario, IBM Research Report, Human Computer Interaction, RC 17908 (75365).
3. Kosters, G., Pagel, B.U., Winter, M., 1997. Coupling Use Cases and Class Models, Proceedings of the BCS-FACS/EROS -workshop on "Making Object Oriented Methods More Rigorous", Imperial College, London-England.
4. Lalioti, V., Theodoulidis, C., 1995. Visual Scenarios for Validation of Requirements Specification, Proceedings of the 7th International Conference on Software Engineering and Knowledge Engineering (SEKE'95), Rochville, Maryland-USA.
5. nd Symposium on Requirements Engineering for Information Security (SREIS'02), Raleigh-North Carolina.
6. Mouratidis, H., 2002. Extending Tropos Methodology to Accommodate Security, Progress Report, Computer Science Department, University of Sheffield.
7. Mouratidis, H., 2003d. Analysis and Design of a Multiagent System to Deliver the Single Assessment Process for Older People, RANK Report, Computer Science Department, University of Sheffield.
8. th Conference on Advance Information Systems (CAiSE-2003). Velden-Austria.
9. nd International Joint Conference on Autonomous Agents and Multiagent Systems (AAMAS-2003), Melbourne-Australia.
10. th International Conference on Enterprise Information Systems (ICEIS-2003), Angers-France.
11. Mouratidis, H., Philp, I., Manson, G., 2003c. A Novel Agent-Based System to Support the Single Assessment Process of Older People, (to appear) Journal of Health Informatics.
12. Potts, C., Takahashi, K., Anton A.I., 1994. Inquiry Based Requirements Analysis, IEEE Software, March 1994.
13. Ryser, J., Glinz, M., 1999. A Practical Approach to Validating and Testing Software Systems Using Scenarios, Proceedings of the Third International Software Quality Week Europe (QWE'99), Brusse, Belgium.
14. Ryser, J., Glinz, M., 2000. SCENT - A Method Employing Scenarios to Systematically Derive Test Cases for System Test, Technical Report 2000.03, Institut für Informatik, University of Zurich.
15. Schneier, B., 2000. Secrets and Lies: Digital Security in a Networked World, John Willey and Sons.
16. Stallings, W., 1999. Cryptography and Network Security: Principles and Practice, Prentice-Hall, Second Edition.
17. Yu, E., 1995. Modelling Strategic Relationships for Process Reengineering, PhD thesis, Department of Computer Science, University of Toronto, Canada.