loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Affiliation

Select a Subject

Ministry of Work and Social Affairs, Management Organism of Information Technologies of the Social Security, Software Development Centre of the National Social Security Institute
Context (please use complete words only)
Field
Sort by

3 Papers

SREPPLine: Towards a Security Requirements Engineering Process for Software Product Lines

Authors: Daniel Mellado 1 , Eduardo Fernández-Medina 2 and Mario Piattini 2

Affiliations: 1 Ministry of Work and Social Affairs, Management Organism of Information Technologies of the Social Security, Software Development Centre of the National Social Security Institute, Spain , 2 University of Castilla-La Mancha, Spain

Digital Object Identifier: 10.5220/0002424702200232

Proceedings of WOSIS 2007/ICEIS, ISBN: 978-972-8865-96-2

Collapse Button Quick Abstract
Security related requirements are increasingly becoming a significant portion of the total set of requirements for many software systems. At the same time, nowadays many systems are developed based on the product line engineering paradigm. Within product lines, security requirements issues are extremely important because weakness in security can cause problems throughout the lifecycle of a line. The main contribution of this work is that of providing a standard-based process, which is an add-in of activities in the domain engineering as well as in application engineering processes. These processes deal with the security requirements from the early stages of product line lifecycle in a systematic and intuitive way especially adapted for product line based development. It is based on the use of the latest security requirements techniques, together with the integration of the Common Criteria (ISO/IEC 15408) into the product line lifecycle. Additionally, it deals with security artifacts reuse, by providing us with a Security Resources Repository. Moreover, it facilitates the conformance to the most relevant security standards with regard to the management of security requirements.

SECURE INFORMATION SYSTEMS DEVELOPMENT - Based on a Security Requirements Engineering Process

Topics: Security Requirements; Security Engineering

Authors: Daniel Mellado 1 , Eduardo Fernández-Medina 2 and Mario Piattini 2

Affiliations: 1 Ministry of Labour and Social Affairs, Information Technology Center of the National Social Security Institute, Spain , 2 University of Castilla-La Mancha, Spain

Digital Object Identifier: 10.5220/0002098004670470

Proceedings of SECRYPT 2006/ICETE, ISBN: 978-972-8865-63-4

Collapse Button Quick Abstract
Integration of security into the early stages of the system development is necessary to build secure systems. However, in the majority of software projects security is dealt with when the system has already been designed and put into operation. This paper will propose an approach called SREP (Security Requirements Engineering Process) for the development of secure software. We will present an iterative and incremental micro-process for the security requirements analysis that is repeatedly performed at each phase. It integrates the Common Criteria into the software lifecycle model as well as it is based on the reuse of security requirements, by providing a security resources repository. In brief, we will present an approach which deals with the security requirements at the early stages of software development in a systematic and intuitive way, and which also conforms to ISO/IEC 17799:2005.
Collapse Button Related Ontology Subjects/Areas/Topics (4)
Information and Systems Security

Security in Information Systems

Security Requirements
Security Engineering

SREP: A Proposal for Establishing Security Requirements for the Development of Secure Information Systems

Authors: Daniel Mellado 1 , Eduardo Fernández-Medina 2 and Mario Piattini 2

Affiliations: 1 Management Organism of Information Technologies of the Social Security, Quality, Auditing and Security Institute, Spain , 2 UCLM-Soluziona Research and Development Institute, University of Castilla-La Mancha, Spain

Digital Object Identifier: 10.5220/0002482701350145

Proceedings of WOSIS 2006/ICEIS, ISBN: 978-972-8865-52-8

Collapse Button Quick Abstract
Nowadays, security solutions are mainly focused on providing security defences, instead of solving one of the main reasons for security problems that refers to an appropriate Information Systems (IS) design. In this paper a proposal for establishing security requirements for the development of secure IS is presented. Our approach is an asset-based and risk-driven method, which is based on the reuse of security requirements, by providing a security resources repository, together with the integration of the Common Criteria into traditional software lifecycle model, so that it conforms to ISO/IEC 15408. Starting from the concept of iterative software construction, we will propose a micro-process for the security requirements analysis, that is repeatedly performed at each level of abstraction throughout the incremental development. In brief, we will present an approach which deals with the security requirements at the first stages of software development in a systematic and intuitive way, and which conforms to ISO/IEC 17799:2005.

Topic(s):

Filter listed results, by

Publication date

From:
To:
Author
Locate Author in list below
Add Author(s) to filter:

- Science and Technology Publications, Lda.
RESOURCES

Proceedings

Papers

Authors

Ontology

CONTACTS

Science and Technology Publications, Lda
Avenida de S. Francisco Xavier, Lote 7 Cv. C,
2900-616 Setúbal, Portugal.

Phone: +351 265 520 185 (National fixed network call)
Fax: +351 265 520 186
Email: info@scitepress.org

EXTERNAL LINKS

PRIMORIS

INSTICC

SCITEVENTS

CROSSREF

PROCEEDINGS SUBMITTED FOR INDEXATION BY:

dblp

Ei Compendex

SCOPUS

Semantic Scholar

Google Scholar

Microsoft Academic