How to Model a Secure Information System (IS): A Case Study
Youseef A. Alotaibi, Fei Liu · International Journal of Information and Education Technology · 2012
The existing information system (IS) developments methods are not met the requirements to resolve the security related (IS) problems and they fail to provide a successful integration of security and systems engineering during all development process stages.Hence, the security should be considered during the whole software development process and identified with the requirements specification.This paper aims to propose an integrated security and IS engineering approach in all software development process stages by using i* language.This proposed framework categorizes into three separate parts: modelling business environment part, modelling information technology system part and modelling IS security part.Booking hotel room management process is used as a case study to validate the proposed framework.The results show that considering security IS goals in the whole system development process can have a positive influence on system implementation and better meet business expectations.