IRMA-International.org: Creator of Knowledge
Information Resources Management Association
Advancing the Concepts & Practices of Information Resources Management in Modern Organizations

Secure by Design: Developing Secure Software Systems from the Ground Up

Secure by Design: Developing Secure Software Systems from the Ground Up
View Sample PDF
Author(s): Haralambos Mouratidis (University of East London, UK)and Miao Kang (Powerchex Ltd., UK)
Copyright: 2011
Volume: 2
Issue: 3
Pages: 19
Source title: International Journal of Secure Software Engineering (IJSSE)
Editor(s)-in-Chief: Martin Gilje Jaatun (SINTEF Digital, Norway)
DOI: 10.4018/jsse.2011070102

Purchase

View Secure by Design: Developing Secure Software Systems from the Ground Up on the publisher's website for pricing and purchasing information.

Abstract

This paper describes results and reflects on the experience of engineering a secure web based system for the pre-employment screening domain. In particular, the paper presents results from a Knowledge Transfer Partnership (KTP) project between the School of Computing, IT and Engineering at the University of East London and the London-based award winning pre-employment company Powerchex Ltd. The Secure Tropos methodology, which is based on the principle of secure by design, has been applied to the project to guide the development of a web based system to support employment reference and background checking specifically for the financial services industry. Findings indicate the potential of the methodology for the development of secure web based systems, and support the argument of incorporating security considerations from the early stages of the software development process, i.e., the idea of secure by design. The developed system was tested by a third, independent to the project, party using a well known method of security testing, i.e., penetration testing, and the results provided did not indicate the presence of any major security problems. The experience and lessons learned by the application of the methodology to an industrial setting are also discussed in the paper.

Related Content

Zachary Estreito, Vinh Le, Frederick C. Harris Jr., Sergiu M. Dascalu. © 2024. 15 pages.
Yogesh M. Kamble, Raj B. Kulkarni. © 2024. 10 pages.
Partha Ghosh, Takaaki Goto, Leena Jana Ghosh, Giridhar Maji, Soumya Sen. © 2024. 15 pages.
Kuo Jong-Yih, Hsieh Ti-Feng, Lin Yu-De, Lin Hui-Chi. © 2024. 17 pages.
Megha Bhushan, Utkarsh Verma, Chetna Garg, Arun Negi. © 2024. 14 pages.
Chase D. Carthen, Araam Zaremehrjardi, Vinh Le, Carlos Cardillo, Scotty Strachan, Alireza Tavakkoli, Frederick C. Harris Jr., Sergiu M. Dascalu. © 2024. 14 pages.
Deepak H. A., Vijayakumar T.. © 2023. 24 pages.
Body Bottom