Information systems security design methods: implications for information systems development

by: Richard Baskerville

ACM Computing Surveys, Vol. 25, No. 4. (December 1993), pp. 375-414.

View FullText article

ACM, DOI

Reviews [Write a review of this article]

There are no reviews of this article

Find related articles from these CiteULike users

zemeigo, hkl, dhein1030

Find related articles with these CiteULike tags

design, development, method, promo, security, uka

Abstract

The security of information systems is a serious issue because computer abuse is increasing. It is important, therefore, that systems analysts and designers develop expertise in methods for specifying information systems security. The characteristics found in three generations of general information system design methods provide a framework for comparing and understanding current security design methods. These methods include approaches that use checklists of controls, divide functional requirements into engineering partitions, and create abstract models of both the problem and the solution. Comparisons and contrasts reveal that advances in security methods lag behind advances in general systems development methods. This analysis also reveals that more general methods fail to consider security specifications rigorously.

@article{citeulike:266070, abstract = {The security of information systems is a serious issue because computer abuse is increasing. It is important, therefore, that systems analysts and designers develop expertise in methods for specifying information systems security. The characteristics found in three generations of general information system design methods provide a framework for comparing and understanding current security design methods. These methods include approaches that use checklists of controls, divide functional requirements into engineering partitions, and create abstract models of both the problem and the solution. Comparisons and contrasts reveal that advances in security methods lag behind advances in general systems development methods. This analysis also reveals that more general methods fail to consider security specifications rigorously.}, address = {New York, NY, USA}, author = {Baskerville, Richard }, citeulike-article-id = {266070}, doi = {10.1145/162124.162127}, issn = {0360-0300}, journal = {ACM Computing Surveys}, keywords = {design, method, security}, month = {December}, number = {4}, pages = {375--414}, posted-at = {2005-07-27 08:49:19}, priority = {2}, publisher = {ACM Press}, title = {Information systems security design methods: implications for information systems development}, url = {http://portal.acm.org/citation.cfm?id=162127}, volume = {25}, year = {1993} }

RIS record

TY - JOUR ID - citeulike:266070 L3 - citeulike-article-id:266070 TI - Information systems security design methods: implications for information systems development JF - ACM Computing Surveys VL - 25 IS - 4 SP - 375 EP - 414 AD - New York, NY, USA PB - ACM Press SN - 0360-0300 N2 - The security of information systems is a serious issue because computer abuse is increasing. It is important, therefore, that systems analysts and designers develop expertise in methods for specifying information systems security. The characteristics found in three generations of general information system design methods provide a framework for comparing and understanding current security design methods. These methods include approaches that use checklists of controls, divide functional requirements into engineering partitions, and create abstract models of both the problem and the solution. Comparisons and contrasts reveal that advances in security methods lag behind advances in general systems development methods. This analysis also reveals that more general methods fail to consider security specifications rigorously. KW - design KW - method KW - security AU - Baskerville, Richard PY - 1993/12// UR - http://portal.acm.org/citation.cfm?id=162127 ER -

RIS BibTeX