Published: Apr 1, 2017
Converted to Gold OA:
DOI: 10.4018/IJSSE.20170401.pre
Volume 8
Martin Gilje Jaatun
Content Forthcoming
Add to Your Personal Library: Article Published: Apr 1, 2017
Converted to Gold OA:
DOI: 10.4018/IJSSE.2017040101
Volume 8
Christos Kalloniatis, Argyri Pattakou, Evangelia Kavakli, Stefanos Gritzalis
Pervasiveness of information systems is well underway, redefining our social and economic relationships. This technological revolution has generated enormous capabilities, but also enabled the...
Show More
Pervasiveness of information systems is well underway, redefining our social and economic relationships. This technological revolution has generated enormous capabilities, but also enabled the creation of new vulnerabilities and threats. A major challenge in the field of information systems is therefore, to ensure the trustworthiness of the underlying technologies that make possible the generation, collection, storage, processing and transmission of user data at rates more intensive than ever before. Trust in information systems depends on different aspects, one of which is the security of user's data. Data security is referred as the protection of user's data from corruption and unauthorized access. Another important aspect of trust is the protection of user's privacy. Protecting privacy is about complying with user's desires when it comes to handling personal information. Without security to guarantee data protection, appropriate uses of that data cannot be realized. This implies that security and privacy issues are inherently intertwined and should be viewed synergistically. The aim of this paper is to elevate modern practices for ensuring security and privacy during software systems analysis and design. To this end, the basic security and privacy requirements that should be considered are introduced. Additionally, a number of well known methods in the research area of requirements engineering which focus on eliciting and modeling security and privacy requirements are described. Finally, a comparative analysis between these methods is presented.
Content Forthcoming
Add to Your Personal Library: Article
Cite Article
Cite Article
MLA
Kalloniatis, Christos, et al. "Designing Secure and Privacy-Aware Information Systems." IJSSE vol.8, no.2 2017: pp.1-25. http://doi.org/10.4018/IJSSE.2017040101
APA
Kalloniatis, C., Pattakou, A., Kavakli, E., & Gritzalis, S. (2017). Designing Secure and Privacy-Aware Information Systems. International Journal of Secure Software Engineering (IJSSE), 8(2), 1-25. http://doi.org/10.4018/IJSSE.2017040101
Chicago
Kalloniatis, Christos, et al. "Designing Secure and Privacy-Aware Information Systems," International Journal of Secure Software Engineering (IJSSE) 8, no.2: 1-25. http://doi.org/10.4018/IJSSE.2017040101
Export Reference
![Mendeley](https://coverimages.igi-global.com/images/mendeley.png)
Published: Apr 1, 2017
Converted to Gold OA:
DOI: 10.4018/IJSSE.2017040102
Volume 8
Martin Boldt, Andreas Jacobsson, Dejan Baca, Bengt Carlsson
In this paper, a novel security-enhanced agile software development process, SEAP, is introduced. It has been designed, tested, and implemented at Ericsson AB, specifically in the development of a...
Show More
In this paper, a novel security-enhanced agile software development process, SEAP, is introduced. It has been designed, tested, and implemented at Ericsson AB, specifically in the development of a mobile money transfer system. Two important features of SEAP are 1) that it includes additional security competences, and 2) that it includes the continuous conduction of an integrated risk analysis for identifying potential threats. As a general finding of implementing SEAP in software development, the developers solve a large proportion of the risks in a timely, yet cost-efficient manner. The default agile software development process at Ericsson AB, i.e. where SEAP was not included, required significantly more employee hours spent for every risk identified compared to when integrating SEAP. The default development process left 50.0% of the risks unattended in the software version that was released, while the application of SEAP reduced that figure to 22.5%. Furthermore, SEAP increased the proportion of risks that were corrected from 12.5% to 67.9%, a more than five times increment.
Content Forthcoming
Add to Your Personal Library: Article
Cite Article
Cite Article
MLA
Boldt, Martin, et al. "Introducing a Novel Security-Enhanced Agile Software Development Process." IJSSE vol.8, no.2 2017: pp.26-52. http://doi.org/10.4018/IJSSE.2017040102
APA
Boldt, M., Jacobsson, A., Baca, D., & Carlsson, B. (2017). Introducing a Novel Security-Enhanced Agile Software Development Process. International Journal of Secure Software Engineering (IJSSE), 8(2), 26-52. http://doi.org/10.4018/IJSSE.2017040102
Chicago
Boldt, Martin, et al. "Introducing a Novel Security-Enhanced Agile Software Development Process," International Journal of Secure Software Engineering (IJSSE) 8, no.2: 26-52. http://doi.org/10.4018/IJSSE.2017040102
Export Reference
![Mendeley](https://coverimages.igi-global.com/images/mendeley.png)
Published: Apr 1, 2017
Converted to Gold OA:
DOI: 10.4018/IJSSE.2017040103
Volume 8
Liguo Yu, Yingmei Li, Srini Ramaswamy
Design patterns are reusable software design solutions to object-oriented programs. Since the initial introduction of the 23 well-known design patterns in 1995, more and more patterns have been...
Show More
Design patterns are reusable software design solutions to object-oriented programs. Since the initial introduction of the 23 well-known design patterns in 1995, more and more patterns have been identified and utilized in the software industry. The benefits of applying design patterns include reducing development cost, improving code quality, and standardizing the integration and maintenance processes. Therefore, using design patterns is becoming a common practice to build both commercial software and open-source products. Although most design patterns are considered creative solutions to some difficult design problems, not all of them are necessarily the best with respect to all different software quality measures, such as program complexity. This paper studies 13 commonly employed design patterns in software industry. First, these 13 patterns are analyzed theoretically about their design complexity in comparison to the conventional solutions. Second, empirical studies are performed on five open-source Java projects to investigate the correlations between design patterns and class structural quality. Finally, these 13 design patterns are evaluated by software programmers who have experience of using all of them. Overall, this study finds that although some design patterns are considered useful, creative, and significant compared to conventional solutions based on user experience, pattern-involved classes are more complex than pattern-free classes, both theoretically and empirically. The authors accordingly recommend a balanced approach to using design patterns: design quality, cost, development time, and product quality should all be considered, when design patterns are utilized.
Content Forthcoming
Add to Your Personal Library: Article
Cite Article
Cite Article
MLA
Yu, Liguo, et al. "Design Patterns and Design Quality: Theoretical Analysis, Empirical Study, and User Experience." IJSSE vol.8, no.2 2017: pp.53-81. http://doi.org/10.4018/IJSSE.2017040103
APA
Yu, L., Li, Y., & Ramaswamy, S. (2017). Design Patterns and Design Quality: Theoretical Analysis, Empirical Study, and User Experience. International Journal of Secure Software Engineering (IJSSE), 8(2), 53-81. http://doi.org/10.4018/IJSSE.2017040103
Chicago
Yu, Liguo, Yingmei Li, and Srini Ramaswamy. "Design Patterns and Design Quality: Theoretical Analysis, Empirical Study, and User Experience," International Journal of Secure Software Engineering (IJSSE) 8, no.2: 53-81. http://doi.org/10.4018/IJSSE.2017040103
Export Reference
![Mendeley](https://coverimages.igi-global.com/images/mendeley.png)
IGI Global Open Access Collection provides all of IGI Global’s open access content in one convenient location and user-friendly interface
that can easily searched or integrated into library discovery systems.
Browse IGI Global Open
Access Collection
Author Services Inquiries
For inquiries involving pre-submission concerns, please contact the Journal Development Division:
journaleditor@igi-global.comOpen Access Inquiries
For inquiries involving publishing costs, APCs, etc., please contact the Open Access Division:
openaccessadmin@igi-global.comProduction-Related Inquiries
For inquiries involving accepted manuscripts currently in production or post-production, please contact the Journal Production Division:
journalproofing@igi-global.comRights and Permissions Inquiries
For inquiries involving permissions, rights, and reuse, please contact the Intellectual Property & Contracts Division:
contracts@igi-global.comPublication-Related Inquiries
For inquiries involving journal publishing, please contact the Acquisitions Division:
acquisition@igi-global.comDiscoverability Inquiries
For inquiries involving sharing, promoting, and indexing of manuscripts, please contact the Citation Metrics & Indexing Division:
indexing@igi-global.com Editorial Office
701 E. Chocolate Ave.
Hershey, PA 17033, USA
717-533-8845 x100