Incorporating database systems into a secure software development methodology

Eduardo B. Fernandez, Jan Jurjens, Nobukazu Yoshioka, Hironori Washizaki

研究成果

4 被引用数 (Scopus)

抄録

We have proposed in the past three separate methodologies for secure software development. We have found that they have many common and complementary aspects and we proposed a combination of them that appears as a good approach to secure software development. The combined methodology applies security at all stages, considers the architectural levels of the system, applies security policies through the use of patterns, and formalizes some portions of the design. We have studied in some detail how to elicit and describe security requirements, how to reflect these requirements in the conceptual model, how to estimate some performance aspects, how to formalize some aspects such as communication protocols, and how to map the conceptual requirements into design artifacts. A design aspect which we have not studied is the incorporation of databases as part of the secure architecture. The database system is a fundamental aspect for security because it stores the persistent information, which constitutes most of the information assets of the institution. We present here some ideas on how to make sure that the database system has the same level of security than the rest of the secure application.

本文言語English
ホスト出版物のタイトルProceedings - DEXA 2008, 19th International Conference on Database and Expert Systems Applications
ページ310-314
ページ数5
DOI
出版ステータスPublished - 2008 12 26
イベントDEXA 2008, 19th International Conference on Database and Expert Systems Applications - Turin, Italy
継続期間: 2008 9 12008 9 5

出版物シリーズ

名前Proceedings - International Workshop on Database and Expert Systems Applications, DEXA
ISSN(印刷版)1529-4188

Conference

ConferenceDEXA 2008, 19th International Conference on Database and Expert Systems Applications
国/地域Italy
CityTurin
Period08/9/108/9/5

ASJC Scopus subject areas

  • 工学(全般)

フィンガープリント

「Incorporating database systems into a secure software development methodology」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル