390
Copyright © 2019, IGI Global. Copying or distributing in print or electronic forms without written permission of IGI Global is prohibited.
Chapter 22
DOI: 10.4018/978-1-5225-7113-1.ch022
ABSTRACT
Pervasiveness of information systems is well underway, redefning our social and economic relation-
ships. This technological revolution has generated enormous capabilities, but also enabled the creation
of new vulnerabilities and threats. A major challenge in the feld of information systems is therefore,
to ensure the trustworthiness of the underlying technologies that make possible the generation, collec-
tion, storage, processing and transmission of user data at rates more intensive than ever before. Trust
in information systems depends on diferent aspects, one of which is the security of user’s data. Data
security is referred as the protection of user’s data from corruption and unauthorized access. Another
important aspect of trust is the protection of user’s privacy. Protecting privacy is about complying with
user’s desires when it comes to handling personal information. Without security to guarantee data protec-
tion, appropriate uses of that data cannot be realized. This implies that security and privacy issues are
inherently intertwined and should be viewed synergistically. The aim of this paper is to elevate modern
practices for ensuring security and privacy during software systems analysis and design. To this end,
the basic security and privacy requirements that should be considered are introduced. Additionally, a
number of well known methods in the research area of requirements engineering which focus on eliciting
and modeling security and privacy requirements are described. Finally, a comparative analysis between
these methods is presented.
Designing Secure and Privacy-
Aware Information Systems
Christos Kalloniatis
University of the Aegean, Lesvos, Greece
Argyri Pattakou
University of the Aegean, Lesvos, Greece
Evangelia Kavakli
University of the Aegean, Lesvos, Greece
Stefanos Gritzalis
University of the Aegean, Samos, Greece