Pattern and Security Requirements

Inhaltsverzeichnis

Foreword.- Preface.- Introduction.- Background.- The PEERESS Framework.- The CAST Method for Comparing Security Standards.- Relating ISO 27001 to the Conceptual Framework for Security Requirements Engineering Methods.- Supporting ISO 27001 compliant ISMS Establishment with Si*.- Supporting ISO 27001 Establishment with CORAS.- Supporting Common Criteria Security Analysis with Problem Frames.- Supporting ISO 26262 Hazard Analysis with Problem Frames.- A Catalog of Context-Patterns.- Initiating a Pattern Language for Context-Patterns.- Supporting the Establishment of a cloud-specific ISMS according to ISO 27001 using the Cloud System Analysis Pattern.- Validation and Extension of our Context-Pattern Approach.- Conclusion.

SALE

Pattern and Security Requirements

Engineering-Based Establishment of Security Standards

Buch (Gebundene Ausgabe, Englisch)

106,99 €

inkl. gesetzl. MwSt.

Pattern and Security Requirements

Ebenfalls verfügbar als:

Gebundenes Buch

Gebundenes Buch

ab 106,99 €
Taschenbuch

Taschenbuch

ab 106,99 €
eBook

eBook

ab 106,99 €

Beschreibung


Security threats are a significant problem for information technology companies today. This book focuses on how to mitigate these threats by using security standards and provides ways to address associated problems faced by engineers caused by ambiguities in the standards. The security standards are analysed, fundamental concepts of the security standards presented, and the relations to the elementary concepts of security requirements engineering (SRE) methods explored. Using this knowledge, engineers can build customised methods that support the establishment of security standards.

Standards such as Common Criteria or ISO 27001 are explored and several extensions are provided to well-known SRE methods such as Si*, CORAS, and UML4PF to support the establishment of these security standards. Through careful analysis of the activities demanded by the standards, for example the activities to establish an Information Security Management System (ISMS) in compliance with the ISO 27001 standard, methods are proposed which incorporate existing security requirement approaches and patterns.

Understanding Pattern and Security Requirements engineering methods is important for software engineers, security analysts and other professionals that are tasked with establishing a security standard, as well as researchers who aim to investigate the problems with establishing security standards. The examples and explanations in this book are designed to be understandable by all these readers.

"The book presents the results of comprehensive research aimed at creating a method for threat analysis and the mitigation of risks through the comparative study of existing standards. ... The book is interesting for practitioners who have to create enterprise-wide security policies and standards. It is worth reading for researchers who deal with the formal and semi-formal modeling of the security domain." (Bálint Molnár, Computing Reviews, September, 2015)

Details

Einband

Gebundene Ausgabe

Erscheinungsdatum

28.04.2015

Verlag

Springer

Seitenzahl

474

Maße (L/B/H)

24,1/16/3,2 cm

Beschreibung

Details

Einband

Gebundene Ausgabe

Erscheinungsdatum

28.04.2015

Verlag

Springer

Seitenzahl

474

Maße (L/B/H)

24,1/16/3,2 cm

Gewicht

910 g

Auflage

2015

Sprache

Englisch

ISBN

978-3-319-16663-6

Das meinen unsere Kund*innen

0.0

0 Bewertungen

Informationen zu Bewertungen

Zur Abgabe einer Bewertung ist eine Anmeldung im Kund*innenkonto notwendig. Die Authentizität der Bewertungen wird von uns nicht überprüft. Wir behalten uns vor, Bewertungstexte, die unseren Richtlinien widersprechen, entsprechend zu kürzen oder zu löschen.

Verfassen Sie die erste Bewertung zu diesem Artikel

Helfen Sie anderen Kund*innen durch Ihre Meinung

Erste Bewertung verfassen

Unsere Kund*innen meinen

0.0

0 Bewertungen filtern

  • Pattern and Security Requirements
  • Foreword.- Preface.- Introduction.- Background.- The PEERESS Framework.- The CAST Method for Comparing Security Standards.- Relating ISO 27001 to the Conceptual Framework for Security Requirements Engineering Methods.- Supporting ISO 27001 compliant ISMS Establishment with Si*.- Supporting ISO 27001 Establishment with CORAS.- Supporting Common Criteria Security Analysis with Problem Frames.- Supporting ISO 26262 Hazard Analysis with Problem Frames.- A Catalog of Context-Patterns.- Initiating a Pattern Language for Context-Patterns.- Supporting the Establishment of a cloud-specific ISMS according to ISO 27001 using the Cloud System Analysis Pattern.- Validation and Extension of our Context-Pattern Approach.- Conclusion.