Identification of basic measurable security components for a distributed messaging system

Reijo Savola; Habtamu Abie

doi:10.1109/SECURWARE.2009.26

Identification of basic measurable security components for a distributed messaging system

Reijo Savola, Habtamu Abie

Norwegian Computing Center

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

21 Citations (Scopus)

Abstract

The lack of appropriate information security solutions in software-intensive systems can have serious consequences for businesses and the stakeholders. Carefully designed security metrics can be used to offer evidence of the security behavior of the system under development or operation. This study investigates holistic development of security metrics for a distributed messaging system based on threat analysis, security requirements, decomposition and use case information. Our approach is thus requirement-centric. The high-level security requirements are expressed in terms of lower-level measurable components applying a decomposition approach.

Original language	English
Title of host publication	Proceedings of the 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009
Place of Publication	Piscataway, NJ
Publisher	IEEE Institute of Electrical and Electronic Engineers
Pages	121-128
ISBN (Print)	978-0-7695-3668-2
DOIs	https://doi.org/10.1109/SECURWARE.2009.26
Publication status	Published - 2009
MoE publication type	A4 Article in a conference publication
Event	3rd International Conference on Emerging Security Information, Systems, and Technologies, SECURWARE '09 - Athens, Greece Duration: 18 Jun 2009 → 23 Jun 2009

Conference

Conference	3rd International Conference on Emerging Security Information, Systems, and Technologies, SECURWARE '09
Abbreviated title	SECURWARE '09
Country/Territory	Greece
City	Athens
Period	18/06/09 → 23/06/09

Access to Document

10.1109/SECURWARE.2009.26

Cite this

@inproceedings{8a7c6b9d9660457a98643d99336e88f3,

title = "Identification of basic measurable security components for a distributed messaging system",

abstract = "The lack of appropriate information security solutions in software-intensive systems can have serious consequences for businesses and the stakeholders. Carefully designed security metrics can be used to offer evidence of the security behavior of the system under development or operation. This study investigates holistic development of security metrics for a distributed messaging system based on threat analysis, security requirements, decomposition and use case information. Our approach is thus requirement-centric. The high-level security requirements are expressed in terms of lower-level measurable components applying a decomposition approach.",

author = "Reijo Savola and Habtamu Abie",

year = "2009",

doi = "10.1109/SECURWARE.2009.26",

language = "English",

isbn = "978-0-7695-3668-2",

pages = "121--128",

booktitle = "Proceedings of the 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

note = "3rd International Conference on Emerging Security Information, Systems, and Technologies, SECURWARE '09, SECURWARE '09 ; Conference date: 18-06-2009 Through 23-06-2009",

}

Savola, R & Abie, H 2009, Identification of basic measurable security components for a distributed messaging system. in Proceedings of the 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009. IEEE Institute of Electrical and Electronic Engineers, Piscataway, NJ, pp. 121-128, 3rd International Conference on Emerging Security Information, Systems, and Technologies, SECURWARE '09, Athens, Greece, 18/06/09. https://doi.org/10.1109/SECURWARE.2009.26

Identification of basic measurable security components for a distributed messaging system. / Savola, Reijo; Abie, Habtamu.
Proceedings of the 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009. Piscataway, NJ: IEEE Institute of Electrical and Electronic Engineers, 2009. p. 121-128.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Identification of basic measurable security components for a distributed messaging system

AU - Savola, Reijo

AU - Abie, Habtamu

PY - 2009

Y1 - 2009

N2 - The lack of appropriate information security solutions in software-intensive systems can have serious consequences for businesses and the stakeholders. Carefully designed security metrics can be used to offer evidence of the security behavior of the system under development or operation. This study investigates holistic development of security metrics for a distributed messaging system based on threat analysis, security requirements, decomposition and use case information. Our approach is thus requirement-centric. The high-level security requirements are expressed in terms of lower-level measurable components applying a decomposition approach.

AB - The lack of appropriate information security solutions in software-intensive systems can have serious consequences for businesses and the stakeholders. Carefully designed security metrics can be used to offer evidence of the security behavior of the system under development or operation. This study investigates holistic development of security metrics for a distributed messaging system based on threat analysis, security requirements, decomposition and use case information. Our approach is thus requirement-centric. The high-level security requirements are expressed in terms of lower-level measurable components applying a decomposition approach.

U2 - 10.1109/SECURWARE.2009.26

DO - 10.1109/SECURWARE.2009.26

M3 - Conference article in proceedings

SN - 978-0-7695-3668-2

SP - 121

EP - 128

BT - Proceedings of the 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009

PB - IEEE Institute of Electrical and Electronic Engineers

CY - Piscataway, NJ

T2 - 3rd International Conference on Emerging Security Information, Systems, and Technologies, SECURWARE '09

Y2 - 18 June 2009 through 23 June 2009

ER -

Identification of basic measurable security components for a distributed messaging system

Abstract

Conference

Access to Document

Fingerprint

Cite this