Evaluating Security of Software Components Using Analytic Network Process

Author

Nazir, Sana ; Shahzad, Sara ; Nazir, Majida ; Rehman, Hanif Ur

Author_Institution

Dept. of Comput. Sci., Univ. of Peshawar, Peshawar, Pakistan

fYear

2013

fDate

16-18 Dec. 2013

Firstpage

183

Lastpage

188

Abstract

Increasing use of Component Based Software Engineering (CBSE) has raised the issues related with the security of software components. Several methodologies are being used to evaluate security of software components and that of the base system with which it is integrated. Security characteristics of a component must be specified effectively and unambiguously. To make possible software development progression, it will be effective to have a method which evaluates the security of software components. The study presented here attempts to propose analytic network process (ANP) for component security evaluation. The method is applied using ISO/IEC 27002 (ISO 27002) standard.

Keywords

IEC standards; ISO standards; object-oriented programming; security of data; software engineering; software standards; ANP; CBSE; ISO/IEC 27002 standard; analytic network process; component based software engineering; component security evaluation; software components; software development progression; IEC standards; ISO standards; Security; Software engineering; Software systems; ANP; security of component;

fLanguage

English

Publisher

ieee

Conference_Titel

Frontiers of Information Technology (FIT), 2013 11th International Conference on

Conference_Location

Islamabad

Print_ISBN

978-1-4799-2293-2

Type

conf

DOI

10.1109/FIT.2013.41

Filename

6717250