Creator of Knowledge
Information Resources Management Association
Advancing the Concepts & Practices of Information Resources Management in Modern Organizations

Secure by Design: Developing Secure Software Systems from the Ground Up

Secure by Design: Developing Secure Software Systems from the Ground Up
View Sample PDF
Author(s): Haralambos Mouratidis (University of East London, UK) and Miao Kang (Powerchex Ltd., UK)
Copyright: 2013
Pages: 19
Source title: Developing and Evaluating Security-Aware Software Systems
Source Author(s)/Editor(s): Khaled M. Khan (Qatar University, Qatar)
DOI: 10.4018/978-1-4666-2482-5.ch001


View Secure by Design: Developing Secure Software Systems from the Ground Up on the publisher's website for pricing and purchasing information.


This paper describes results and reflects on the experience of engineering a secure web based system for the pre-employment screening domain. In particular, the paper presents results from a Knowledge Transfer Partnership (KTP) project between the School of Computing, IT and Engineering at the University of East London and the London-based award winning pre-employment company Powerchex Ltd. The Secure Tropos methodology, which is based on the principle of secure by design, has been applied to the project to guide the development of a web based system to support employment reference and background checking specifically for the financial services industry. Findings indicate the potential of the methodology for the development of secure web based systems, and support the argument of incorporating security considerations from the early stages of the software development process, i.e., the idea of secure by design. The developed system was tested by a third, independent to the project, party using a well known method of security testing, i.e., penetration testing, and the results provided did not indicate the presence of any major security problems. The experience and lessons learned by the application of the methodology to an industrial setting are also discussed in the paper.

Related Content

Eduardo Miranda. © 2021. 27 pages.
Mirna Muñoz, Jezreel Mejía, Claude Y. Laporte. © 2021. 24 pages.
Nuno António Santos, Nuno Ferreira, Ricardo J. Machado. © 2021. 27 pages.
Laura C. Rodriguez-Martinez, Hector A. Duran-Limon, Manuel Mora. © 2021. 22 pages.
Ashay Saxena, Shankar Venkatagiri, Rajendra K Bandi. © 2021. 14 pages.
Danilo F. S. Santos, André Felipe A. Rodrigues, Walter O. Guerra Filho, Marcos Fábio Pereira. © 2021. 15 pages.
Danyllo Wagner Albuquerque, Everton Tavares Guimarães, Felipe Barbosa Araújo Ramos, Antonio Alexandre Moura Costa, Alexandre Gomes, Emanuel Dantas, Mirko Perkusich, Hyggo Almeida. © 2021. 21 pages.
Body Bottom