Modelling Security and Trust with Secure Tropos

Giorgini, P. and Mouratidis, H. and Zannone, N. (2006) Modelling Security and Trust with Secure Tropos. In: Integrating Security and Software Engineering: Advances and Future Vision. IDEA. ISBN 1-59904-149-9

Abstract

Although the concepts of security and trust play an important issue in the development of information systems, they have been mainly neglected by software engineering methodologies. In this chapter, we present an approach that considers security and trust throughout the software development process. Our approach integrates two prominent software engineering approaches, one that provides a security-oriented process and one that provides a trust management process. The result is the development of a methodology that considers security and trust issues as part of its development process. Such integration represents an advance over the current state of the art by providing the first effort to consider security and trust issues under a single software engineering methodology. A case study from the health domain is employed to illustrate our approach.

Archive Staff Only: edit this record