Security concerns for contemporary development practices: A case study

Abstract

This paper presents a case of application of an interpretive framework, which intends to formally integrate information systems security concerns within the information system's lifecycle. Aspects that are not normally taken under consideration, such as the involved stakeholders, the development approach and their implication to security issues, are introduced in such a way to benefit and empower the IS security design process. In the case presented here, the framework is used to extract a powerful process model description focusing on security concerns, so as to enlighten the work of the security designer significantly earlier before the use of risk analysis and the construct of a security plan or policy. © 2002 Kluwer Academic / Plenum Publishers, New York.