Security concerns for contemporary development practices: a case study

  • Authors:
  • T. Tryfonas;E. Kiountouzis

  • Affiliations:
  • Athens Univ. of Economics and Business, Athens, Greece;Athens Univ. of Economics and Business, Athens, Greece

  • Venue:
  • Sec '01 Proceedings of the 16th international conference on Information security: Trusted information: the new decade challenge
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper presents a case of application of an interpretive framework, which intends to formally integrate information systems security concerns within the information system's lifecycle. Aspects that are not normally taken under consideration, such as the involved stakeholders, the development approach and their implication to security issues, are introduced in such a way to benefit and empower the IS security design process. In the case presented here, the framework is used to extract a powerful process model description focusing on security concerns, so as to enlighten the work of the security designer significantly earlier before the use of risk analysis and the construct of a security plan or policy.