DocumentCode :
2831230
Title :
Incorporating Database Systems into a Secure Software Development Methodology
Author :
Fernandez, Eduardo B. ; Jurjens, Jan ; Yoshioka, Nobukazu ; Washizaki, Hironori
Author_Institution :
Dept. of Comput. Sci., Florida Atlantic Univ., Boca Raton, FL
fYear :
2008
fDate :
1-5 Sept. 2008
Firstpage :
310
Lastpage :
314
Abstract :
We have proposed in the past three separate methodologies for secure software development. We have found that they have many common and complementary aspects and we proposed a combination of them that appears as a good approach to secure software development. The combined methodology applies security at all stages, considers the architectural levels of the system, applies security policies through the use of patterns, and formalizes some portions of the design. We have studied in some detail how to elicit and describe security requirements, how to reflect these requirements in the conceptual model, how to estimate some performance aspects, how to formalize some aspects such as communication protocols, and how to map the conceptual requirements into design artifacts. A design aspect which we have not studied is the incorporation of databases as part of the secure architecture. The database system is a fundamental aspect for security because it stores the persistent information, which constitutes most of the information assets of the institution. We present here some ideas on how to make sure that the database system has the same level of security than the rest of the secure application.
Keywords :
database management systems; formal specification; security of data; software architecture; database system; information asset; secure architecture; secure software development; security requirement; software architecture; Application software; Communication system security; Computer security; Data security; Database systems; Information security; National security; Object oriented modeling; Programming; Protocols; database security; security; security patterns;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Database and Expert Systems Application, 2008. DEXA '08. 19th International Workshop on
Conference_Location :
Turin
ISSN :
1529-4188
Print_ISBN :
978-0-7695-3299-8
Type :
conf
DOI :
10.1109/DEXA.2008.100
Filename :
4624734
Link To Document :
بازگشت