Incorporating database systems into a secure software development methodology

Eduardo B. Fernandez, Jan Jurjens, Nobukazu Yoshioka, Hironori Washizaki

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Citations (Scopus)

Abstract

We have proposed in the past three separate methodologies for secure software development. We have found that they have many common and complementary aspects and we proposed a combination of them that appears as a good approach to secure software development. The combined methodology applies security at all stages, considers the architectural levels of the system, applies security policies through the use of patterns, and formalizes some portions of the design. We have studied in some detail how to elicit and describe security requirements, how to reflect these requirements in the conceptual model, how to estimate some performance aspects, how to formalize some aspects such as communication protocols, and how to map the conceptual requirements into design artifacts. A design aspect which we have not studied is the incorporation of databases as part of the secure architecture. The database system is a fundamental aspect for security because it stores the persistent information, which constitutes most of the information assets of the institution. We present here some ideas on how to make sure that the database system has the same level of security than the rest of the secure application.

Original languageEnglish
Title of host publicationProceedings - DEXA 2008, 19th International Conference on Database and Expert Systems Applications
Pages310-314
Number of pages5
DOIs
Publication statusPublished - 2008 Dec 26
EventDEXA 2008, 19th International Conference on Database and Expert Systems Applications - Turin, Italy
Duration: 2008 Sep 12008 Sep 5

Publication series

NameProceedings - International Workshop on Database and Expert Systems Applications, DEXA
ISSN (Print)1529-4188

Conference

ConferenceDEXA 2008, 19th International Conference on Database and Expert Systems Applications
CountryItaly
CityTurin
Period08/9/108/9/5

ASJC Scopus subject areas

  • Engineering(all)

Fingerprint Dive into the research topics of 'Incorporating database systems into a secure software development methodology'. Together they form a unique fingerprint.

  • Cite this

    Fernandez, E. B., Jurjens, J., Yoshioka, N., & Washizaki, H. (2008). Incorporating database systems into a secure software development methodology. In Proceedings - DEXA 2008, 19th International Conference on Database and Expert Systems Applications (pp. 310-314). [4624734] (Proceedings - International Workshop on Database and Expert Systems Applications, DEXA). https://doi.org/10.1109/DEXA.2008.100