Enhacing security in the design of information systems

Irina Juhnov (2010) Enhacing security in the design of information systems. EngD thesis.

PDF Download (3187Kb)

Abstract

This work covers security aspects in the design of information systems in connection with identity management. In the beginning we define terms of computer security based on access control. Later on we present the definition of identity management and describe the structure of indentity management systems. The core of this work is an owerview of the proposed approach, methods and recommendations for building secure information systems based on articles of different authors. Common poit of all approaches is that they all use the designing standard UML which is also presented in one of the chapters. From among all proposals on security aspects improvement we take the best ones and use them on a concrete example. As the framework for presenting best solutions we take the exsisting information system of University in Ljubljana with all the belonging applications. We demonstrate the best solutions for improving information system security with emphasis on management of digital identity and lifecycle of digital identity for a student and a teacher. At the end we critically compare all proposed expansions and stress their main advantages and disadvantages.

Actions (login required)