Integrating security and usability into the requirements and design process

International Journal of Electronic Security and Digital Forensics

Volumn 1, Issue 1, 2007, Pages 12-26

  Flechais, Ivan ^a   Mascolo, Cecilia ^b   Sasse, M Angela ^b  

^a UNIVERSITY OF OXFORD   (United Kingdom)

^b UNIVERSITY COLLEGE LONDON   (United Kingdom)

Author keywords

security; security design; security modelling; security requirements; usability

Indexed keywords

EID: 84931024051     PISSN: 1751911X     EISSN: 17519128     Source Type: Journal    
DOI: 10.1504/IJESDF.2007.013589     Document Type: Article

References (20)

1. Adams, A. and Sasse, M.A. (1999) ‘Users are not the enemy’, Communications of the ACM, Vol. 42, No. 12.
2. Beyer, H. and Holtzblatt, K. (1998) Contextual Design: Defining Customer-Centered Systems, Morgan Kaufmann Publishers, Inc.
3. Boehm, B.W. (1988) ‘A spiral model of software development and enhancement’, IEEE Computer, Vol. 21, No. 5, pp.61–72.
4. Brostoff, S. and Sasse, M.A. (2001) ‘Safe and sound: a safety-critical approach to security design’, Proceedings of the New Security Paradigms Workshop.
5. Denaro, G., Polini, A. and Emmerich, W. (2004) ‘Performance testing of distributed component architectures’, in S. Beydeda and V. Gruhn (Eds). Building Quality into COTS Components – Testing and Debugging, Springer.
6. Flechais, I., Sasse, M.A. and Hailes, S.M. (2003) ‘Bringing security home: a process for developing secure and usable systems’, Proceedings of the New Security Paradigms Workshop.
7. Gollman, D. (1999) Computer Security, Wiley.
8. Guerra, P.A.d.C., Rubira, C. and de Lemos, R. (2003) ‘A fault-tolerant software architecture for component-based systems’, Lecture Notes in Computer Science, Vol. 2677, pp.129–149.
9. James, H.L. (1996) ‘Managing information systems security: a soft approach’, Proceedings of the Information Systems Conference of New Zealand, Los Alamitos, CA: IEEE Society Press.
10. Jazayeri, M. (2002) ‘On architectural stability and evolution’, Reliable Software Technologies – Ada-Europe, Vienna, Austria, 17–21 June.
11. Jürjens, J. (2003) ‘UMLsec: extending UML for secure systems development’, LNCS.
12. Ka-Ping, Y. (2002) ‘User interaction design for secure systems’, Proceedings of the Fourth International Conference on Information and Communications Security, Springer-Verlag.
13. McDermott, J. and Fox, C. (1999) ‘Using abuse cases for security requirements analysis’, Proceedings of the 15th Annual Computer Security Applications Conference.
14. Mumford, E. (1983) Designing Human Systems – The Ethics Method.
15. Object Management Group (2003a) Meta Object Facility (MOF) Specification, Technical Report.
16. Object Management Group (2003b) Unified Modeling Language Version 1.5.
17. Object Management Group (2004) Model Driven Architecture.
18. Schneier, B. (2003) Beyond Fear Thinking Sensibly about Security in an Uncertain World, Copernicus Books.
19. Straub, D.W. and Welke, R.J. (1998) ‘Coping with systems risk: security planning models for managerial decision-making’, MIS Quarterly, Vol. 22, No. 4, pp.441–469.
20. Whitten, A. and Tygar, J.D. (1999) ‘Why Johnny can’t encrypt: a usability evaluation of PGP 5.0’, Proceedings of the Eighth USENIX Security Symposium, Washington.