The Information Systems Security Process: Through an Anthropological Lens

摘要

Developing and designing security systems and subsystems is a vital component of the ISD process, yet often is not considered until after the software has been developed. This reflects the low value that ISD places upon security. Some researchers argue that the type of development methodology used by devel-opers is a reflection of their values. In this chapter we investigate five of the most common ISD methodologies described in the ISD literature, and also examine to what extent each of these methodologies incorporates security as part of the de-velopment process. This chapter will also show findings of a study that measured the values of potential developers from Ireland and various other countries around the world, to see if they value security. The study showed that current ISD meth-odologies are out-of-step with developers' attitudes in terms of information sys-tems security (ISS).