| 1. |
- Wäyrynen, Jaana, et al.
(författare)
-
Security engineering and eXtreme programming : An impossible marriage?
- 2004
-
Ingår i: EXTREME PROGRAMMING AND AGILE METHODS - XP/ AGILE UNIVERSE 2004, PROCEEDINGS. - Berlin : Springer. ; , s. 117-128
-
Konferensbidrag (refereegranskat)abstract
- Agile methods, such as eXtreme Programming (XP), have been criticised for being inadequate for the development of secure software. In this paper, we analyse XP from a security engineering standpoint, to assess to what extent the method can be used for development of security critical software. This is done by analysing XP in the light of two security engineering standards; the Systems Security Engineering-Capability Maturity Model (SSE-CMM) and the Common Criteria (CC). The result is that XP is more aligned with security engineering than one might think at first. However, XP also needs to be tailored to better support and to more explicitly deal with security engineering issues. Tailoring XP for secure software development, without removing the agility that is the trademark of agile methods, may be a solution that would make XP more compatible with current security engineering practices.
|
|
| 2. |
|
|
| 3. |
- Perjons, Erik, et al.
(författare)
-
Introducing a Process Manager in Healthcare : An experience report
- 2004
-
Ingår i: Proceedings of The Ninth International Symposium on Health Information Management. ; , s. 15-17
-
Konferensbidrag (refereegranskat)abstract
- To be efficient and patient focused, healthcare units need to be process oriented and integrated with the processes and IT systems of other healthcare units. A process manager facilitates integration of different systems by using graphical and executable process models. The process manager also communicates directly with healthcare personnel via desktop computers and mobile devices. This article reports on a Swedish project where a prototype system was developed and tested with several healthcare units. The experience shows several advantages and opportunities. For example, current information about patients can be transferred automatically between healthcare units; resource intensive manual tasks can be replaced with automated tasks; and long-term process monitoring and quality assessment can be enabled. However, introducing a process manager requires attention to issues of security, ethics and legality. Healthcare units may also show differences in security awareness and IT maturity, which could obstruct the introduction of a process manager.
|
|
