Developing and Evaluating Security-Aware Software Systems

Developing and Evaluating Security-Aware Software Systems

Copyright: © 2013 |Pages: 367

ISBN13: 9781466624825|ISBN10: 1466624825|EISBN13: 9781466624832

DOI: 10.4018/978-1-4666-2482-5

Cite Book Cite Book

MLA

Khan, Khaled M., editor. Developing and Evaluating Security-Aware Software Systems. IGI Global, 2013. https://doi.org/10.4018/978-1-4666-2482-5

APA

Khan, K. M. (Ed.). (2013). Developing and Evaluating Security-Aware Software Systems. IGI Global. https://doi.org/10.4018/978-1-4666-2482-5

Chicago

Khan, Khaled M., ed. Developing and Evaluating Security-Aware Software Systems. Hershey, PA: IGI Global, 2013. https://doi.org/10.4018/978-1-4666-2482-5

Export Reference

Favorite Full-Book Download

As computer technologies continue to evolve and new security threats emerge, secure-aware software developments are essential in the software engineering field.

Developing and Evaluating Security-Aware Software Systems provides innovative ideas and methods on the development, operation, and maintenance of secure software systems and aims to highlight the construction of a functional software system and a secure system simultaneously. This book is practical for researchers, academics and practitioners in the software engineering and security fields.

Table of Contents

Reset

Front Materials

Title Page

Copyright Page

Editorial Advisory Board

Preface

Chapters

Software Development Process

Chapter 1

Secure by Design: Developing Secure Software Systems from the Ground Up (pages 1-19)

Haralambos Mouratidis, Miao Kang

This paper describes results and reflects on the experience of engineering a secure web based system for the pre-employment screening domain. In particular, the paper presents results from a Knowledge Transfer Partnership (KTP)...

Chapter 2

Security Evaluation of Service-Oriented Systems Using the SiSOA Method (pages 20-35)

Christian Jung, Manuel Rudolph, Reinhard Schwarz

The Service-Oriented Architecture paradigm (SOA) is commonly applied for the implementation of complex, distributed business processes. The service-oriented approach promises higher flexibility, interoperability and reusability of...

Chapter 3

Eliciting Policy Requirements for Critical National Infrastructure Using the IRIS Framework (pages 36-55)

Shamal Faily, Ivan Fléchais

Despite existing work on dealing with security and usability concerns during the early stages of design, there has been little work on synthesising the contributions of these fields into processes for specifying and designing...

Chapter 4

Organizational Patterns for Security and Dependability: From Design to Application (pages 56-76)

Yudis Asnar, Fabio Massacci, Ayda Saidane, Carlo Riccucci, Massimo Felici, Alessandra Tedeschi, Paul El-Khoury, Keqin Li, Magali Séguran, Nicola Zannone

Designing secure and dependable IT systems requires a deep analysis of organizational as well as social aspects of the environment where the system will operate. Domain experts and analysts often face security and dependability (S&D)...

Chapter 5

Not Ready for Prime Time: A Survey on Security in Model Driven Development (pages 77-90)

Jostein Jensen, Martin Gilje Jaatun

Model Driven Development (MDD) is by many considered a promising approach for software development. This article reports the results of a systematic survey to identify the state-of-the-art within the topic of security in model driven...

Chapter 6

Security Gaps in Databases: A Comparison of Alternative Software Products for Web Applications Support (pages 91-111)

Afonso Araújo Neto, Marco Vieira

When deploying database-centric web applications, administrators should pay special attention to database security requirements. Acknowledging this, Database Management Systems (DBMS) implement several security mechanisms that help...

Formal Techniques and Tools

Chapter 7

Using Executable Slicing to Improve Rogue Software Detection Algorithms (pages 113-124)

Jan Durand, Juan Flores, Travis Atkison, Nicholas Kraft, Randy Smith

This paper describes a research effort to use executable slicing as a pre-processing aid to improve the prediction performance of rogue software detection. The prediction technique used here is an information retrieval classifier...

Chapter 8

Ell Secure Information System Using Modal Logic Technique (pages 125-137)

Yun Bai, Khaled M. Khan

In this paper, the authors propose a formal logic technique to protect information systems. As the widespread use of computer systems grows, the security of the information stored in such systems has become more important. As a...

Chapter 9

A Formal Language for XML Authorisations Based on Answer Set Programming and Temporal Interval Logic Constraints (pages 138-160)

Sean Policarpio, Yan Zhang

The Extensible Markup Language is susceptible to security breaches because it does not incorporate methods to protect the information it encodes. This work focuses on the development of a formal language that can provide role-based...

Chapter 10

Building Secure Software Using XP (pages 161-175)

Walid Al-Ahmad

Security is an important and challenging aspect that needs to be considered at an early stage during software development. Traditional software development methodologies do not deal with security issues and so there is no structured...

Standard Security Functions

Chapter 11

Analysis of ANSI RBAC Support in EJB (pages 177-204)

Wesam Darwish, Konstantin Beznosov

This paper analyzes access control mechanisms of the Enterprise Java Beans (EJB) architecture and defines a configuration of the EJB protection system in a more precise and less ambiguous language than the EJB 3.0 standard. Using...

Chapter 12

Performance Evaluation of Secure Key Deployment and Exchange Protocol for MANETs (pages 205-224)

Alastair Nisbet, M. A. Rashid

Secure Key Deployment and Exchange Protocol (SKYE) is a new encryption Key Management Scheme (KMS) based on combination of features from recent protocols combined with new features for Mobile Ad Hoc Networks (MANETs). The design...

Chapter 13

JavaSPI: A Framework for Security Protocol Implementation (pages 225-239)

Matteo Avalle, Alfredo Pironti, Davide Pozza, Riccardo Sisto

This paper presents JavaSPI, a “model-driven” development framework that allows the user to reliably develop security protocol implementations in Java, starting from abstract models that can be verified formally. The main novelty of...

Chapter 14

A Systematic Empirical Analysis of Forging Fingerprints to Fool Biometric Systems (pages 240-284)

Christian Schwarzl, Edgar Weippl

This paper serves to systematically describe the attempts made to forge fingerprints to fool biometric systems and to review all relevant publications on forging fingerprints to fool sensors. The research finds that many of the...

Chapter 15

Integrating Patient Consent in e-Health Access Control (pages 285-308)

Kim Wuyts, Riccardo Scandariato, Griet Verhenneman, Wouter Joosen

Many initiatives exist that integrate e-health systems on a large scale. One of the main technical challenges is access control, although several frameworks and solutions, like XACML, are becoming standard practice. Data is no longer...

Back Materials

Compilation of References

About the Contributors

Index

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.

Username or email: *

Password: *

Forgot individual login password?

Create individual account