A Research on Secure Methodology Considering Assurances and Processes for Developing High Reliable Security Systems

摘要

For reliability and confidentiality of information security systems, the methods of security engineering such as CC, ITSEC, SSE-CMM and SPICE are wildly accepted in many organizations. The methods of security engineering such as SSE-CMM, SPICE decrease costs through assuring developing processes of information security systems. The above approaches will not be exclusive but supplemental. When highly reliable information security systems are developed, security engineering method considering both product itself and production processes should be introduced. This research suggests security methodology, called HISEM (High Secure Methodology), which is suitable for developing highly reliable information security systems, and AUTO-HISEM, automation methodology tool, which can be applied in HISEM.