Information systems security engineering: a critical component of the systems engineering lifecycle

The purpose of this research paper is to illustrate the industrial and federal need for Information Systems Security Engineering (ISSE) in order to build Information Assurance (IA) into a system rather than the current costly practice of fixing systems after production. Extensive research was performed by collecting information from throughout the World Wide Web to include sites such as the National Security Agency’s Homepage, the Information Assurance Technical Framework Homepage, the Workshop for Application of Engineering Principles to System Security Design, as well as many others. This research realized the following findings: (1) IA is dangerously left out of systems engineering processes; (2) a consortium from academia, industry and the federal government have formalized ISSE and its processes; (3) federally sponsored and industrially sponsored professional certifications exist for security engineers practicing ISSE; (4) ISSE, however, is not greatly used today due to a lack ...

• Type: Conference
• Year: 2004
• Where: SIGADA
• Authors: James F. Davis
• Keywords: Information Assurance, Information Systems Security Engineering, SIGADA 2004, Systems Engineering