Information systems security and the information systems development project towards a framework for their integration

IFIP Advances in Information and Communication Technology

Volumn 86, Issue , 2002, Pages 347-356

  Tryfonas, T ^a   Kiountouzis, E ^a  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

Development practices; Development project; IS Security integration

Indexed keywords

ECONOMIC AND SOCIAL EFFECTS; INFORMATION SYSTEMS; LIFE CYCLE; MANAGEMENT INFORMATION SYSTEMS; SECURITY OF DATA;

CONTEMPORARY PRACTICES; INFORMATION SYSTEMS DEVELOPMENT; INFORMATION SYSTEMS DEVELOPMENT PROJECTS; INFORMATION SYSTEMS SECURITY; MAKE-OR-BUY DECISIONS; MOST LIKELY; SECURITY PROBLEMS; SYSTEMS DEVELOPMENT;

INFORMATION USE;

EID: 84904322735     PISSN: 18684238     EISSN: 1868422X     Source Type: Book Series    
DOI: 10.1007/978-0-387-35586-3_28     Document Type: Conference Paper

References (21)

1. Anderson, R.I. (1993), “Why cryptosystems fail”, Communications o/the ACM, 37(11), pp 32-44.
2. Barnard, L. and von Solms, R. (2000), “A Formalized Approach to the Effective Selection and Evaluation of Information Security Controls”, Computers & Security, Vol 19 No 2, pp 185-194.
3. Baskerville, R. (1993), “Information Systems Security Design Methods: Implications for Information Systems Development”, ACM Computing Surveys, Vol. 25, No.4, pp 375-414.
4. Brownsword, L., Obemdorf, T. and Sledge C.A. (2000), “Developing New Processes for COTS-Based Systems”, IEEE Software, July/August, pp 48-55.
5. Checkland, P. (1981), Systems thinking, systems practice, Wiley Publications.
6. Downs, E., Clare, P. and Coe, I. (1992), SSADM: Application and Context, Prentice Hall.
7. Eloff, M., and Von Solms, B. (2000), “Information Security: Process Evaluation and Product Evaluation”, in Information Security for Global Information Infrastructures, S. Qing and J. Eloff (Eds.), Kluwer Academic Publishers, pp 11-19.
8. Finne, T. (1998), “A conceptual framework for information security management”, Computers & Security, Vol 17, pp 303-307.
9. Gable, G.G. (1994), “Integrating case study and survey research methods: An example in information systems”, European Journal of Information Systems, Vol. 3, No.2, pp 112-126.
10. Hayam, A. and Oz, E. (1993), “Integrating Data Security into the Systems Development Life Cycle”, Journal of Systems Management, Vol. 8 No 44, pp 16-20.
11. Hitchings I. (1995), “Achieving an Integrated Design: The Way Forward for Information Security”, in Information Security - the next decade, J. Ellof and S. von Solms (Eds.), Chapman & Hall.
12. Jarvinen, P.H. (2000), “Research Questions Guiding Selection of an Appropriate Research Method”, Proceedings of the 8th European Conference on Information Systems (ECIS).
13. Kephart, J.O. (1994), “A Biologically Inspired Immune System for Computers”, in Artificial life IV, R. Brooks and P. Maes (Eds.), MIT Press.
14. Moulinos, K., Kyrloglou, N. and Tryfonas, T. (2000), “A Framework for Comparing Cryptographic Libraries”, in IFIP/SEC 2000: Information Security, S. Qing and J. Eloff (Eds.), International Academic Publishers, pp 9-12.
15. Mumford, E. (1998), “Problems, knowledge, solutions: Solving complex problems”, Journal of Strategic Information Systems, 7, pp 255-269.
16. Siponen, M. (2001), “An Analysis of the Recent IS Security Development Approaches: Descriptive and Prescriptive Implications”, in Information Security Management: Global Challenges in the New Millennium, G. Dhillon, Idea Group Publishing, pp 101-124.
17. Tryfonas, T. and Kiountouzis, E. (2001), “Security Concerns for Contemporary Development Practices: A Case Study”, in Trusted Information: The new decade challenge, M. Dupuy and P. Paradinas (Eds.), Kluwer Academic Publishers, pp 421-435.
18. Tryfonas, T., Kiountouzis, E. and Poulymenakou, A. (2001), “Embedding security practices in contemporary information systems development approaches”, Information Management & Computer Security, Vol. 9 No 4, pp 183-197.
19. Walsham, G. (1991), “Organisational metaphors and information systems research”, European Journal of Information Systems, Vol. 1, No.2, pp 83-94.
20. Witty, R. et al (2001), The price of information security, Strategic Analysis Report R-11-6534 (June), Gartner Research.
21. Wood, c.c. and Snow, K. (1995), “ISO 9000 and Information Security”, Computers & Security, 14, pp 287-288.