Designing Security Requirement Solutions Using Back Tracking Approach

Abstract

Current practices for developing secure information systems are still closer to art than to an engineering discipline. Security is still treated as an add-on and is therefore not integrated into software development practices and tools. Experienced security artisans are still the key to achieving acceptable levels of security. Security of software system means protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability and confidentiality of information system resources (includes hardware, software, firmware, information/data, and telecommunications). Many methods have been proposed for framing the security requirements, but the main target is how to find the solutions fulfilling these security requirements, to produce complete secure information system. So, we propose a Model framework for finding a complete solutions of security requirements, which are identified during the security requirement elicitation stage, using back tracking analysis. After gathering security requirements, we do back tracking analysis of the approaches used to gather security requirements, to identify the solutions necessary to fulfill the gathered security requirements. On basis of back tracking analysis, we will find conceptual solutions and security services and corresponding mechanisms which encompass the complete security of software system.