Active and Personalized Services in an Information Security Engineering Cloud Based on ISO/IEC 15408

2014 ◽  
pp. 35-48
Author(s):  
Liqing Xu ◽  
Yuichi Goto ◽  
Ahmad Iqbal Hakim Suhaimi ◽  
Ning Zhang ◽  
Jingde Cheng
Keyword(s):  
Information Security ◽  
Security Engineering ◽  
Personalized Services

Security Engineering

2011 ◽  
pp. 168-181
Author(s):  
Ronda R. Henning
Keyword(s):  
Information Security ◽  
Systems Engineering ◽  
Development Process ◽  
System Analysis ◽  
Security Analysis ◽  
Security Requirements ◽  
Security Engineering ◽  
System Analysis And Design ◽  
Early Integration ◽  
Analysis And Design

Information security engineering is the specialized branch of systems engineering that addresses the derivation and fulfillment of a system’s security requirements. For years, security engineering practitioners have claimed that security is easier to build into a system when it is integrated with the system analysis and design. This paper presents some basic tenets of security analysis that can be applied by any systems engineer to ensure early integration of security constraints into the system definition and development process. It sheds light on security requirements interpretation to facilitate the fulfillment of security requirements throughout the system lifecycle.

Sign in / Sign up

Export Citation Format

Share Document