Advanced Information Systems Engineering

Volume 2681 of the series Lecture Notes in Computer Science pp 63-78


Integrating Security and Systems Engineering: Towards the Modelling of Secure Information Systems

  • Haralambos MouratidisAffiliated withDepartment of Computer Science, University of Sheffield
  • , Paolo GiorginiAffiliated withDepartment of Information and Communication Technology, University of Trento
  • , Gordon MansonAffiliated withDepartment of Computer Science, University of Sheffield

* Final gross prices may vary according to local VAT.

Get Access


Security is a crucial issue for information systems. Traditionally, security is considered after the definition of the system. However, this approach often leads to problems, which translate into security vulnerabilities. From the viewpoint of the traditional security paradigm, it should be possible to eliminate such problems through better integration of security and systems engineering. This paper argues for the need to develop a methodology that considers security as an integral part of the whole system development process. The paper contributes to the current state of the art by proposing an approach that considers security concerns as an integral part of the entire system development process and by relating this approach with existing work. The different stages of the approach are described with the aid of a case study; a health and social care information system.