Procesni model implementacije sigurnosnih zahtjeva za usluge s dodanom vrijednošću

scientific master's theses

• Title (english): Process model for implementation of security requirements for value added services
• Author: Hrvoje Belani
• Mentor: Željka Car (mentor)
• Committee member: Miljenko Mikuc (predsjednik povjerenstva)
• Committee member: Željka Car (član povjerenstva)
• Committee member: Antun Carić (član povjerenstva)
• Committee member: Ignac Lovrek (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Telecommunications); Zagreb
• Defense date and country: 2007-10-26, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering; Telecommunications and Informatics
• Universal decimal classification (UDC): 621.3 - Electrical engineering ; 654 - Telecommunication and telecontrol

Abstract

Zbog rasprostranjenosti SMS usluga i pojave novih poslovnih modela koji stvaraju dodanu vrijednost uvode se SMS usluge s dodanom vrijednošću. Zbog rezultata istraživanja o raširenosti sigurnosnih incidenata na računalnim sustavima diljem svijeta, neophodan je organizacijski pristup implementaciji sigurnosti u skladu s široko raširenim procesnim okvirom RUP. RUP-u manjka procesnih aktivnosti, uloga i tok informacija neophodnih za uspješnu implementaciju sigurnosti. SecuRUP je procesni model implementacije sigurnosnih zahtjeva za usluge s dodanom vrijednošću nastao kao rezultat analize i implementacije studijskog slučaja. Opisan je do razine detalja svakog procesa, artefakata, aktivnosti i uloga koje ih obavljaju s ciljem uspješne implementacije sigurnosnih zahtjeva. Također je izrađena usporedna analiza predloženog modela s postojećim procesnim metodologijama. Izvedena je verifikacija modela na novom studijskom slučaju usluge s dodanom vrijednošću, gdje su rezultati primjene modela pokazali znatan napredak pogotovo kod prepoznavanja uloga u procesu implementacije sigurnosti. No, ostaje i dalje nezaobilazna pretpostavka za daljnjom verifikacijom i evolucijom modela na studijskim slučajevima iz industrije, jer je to najbolji pokazatelj korisnosti postojanja ovakvih modela.

Abstract (english)

Due to the spreading of SMS services and appearing of new business models which create added values, value added SMS services have been introduced. According to the research results about wide distribution of security incidents on computer systems worldwide, there is a necessity for organizational approach to implement security conformed to highly popular RUP process framework. RUP lacks of activities, roles and information flow needed for successful implementation of security. SecuRUP represents a process model for implementation of security requirements for value added services developed during the analysis and implementation of the case study. The model is described in details covering every process, artifact, activity and according roles in order to successfully implement given security requirements. Also, comparative analysis of SecuRUP with similar process methodologies is given. The model is verified on a new case study of value added service, and results have shown significant improvement, especially on role identification in security implementation process. Still, unavoidable presumption remains that the model has to be verified and evolved further more on case studies from industry, because it is the best indicator for usefulness of such models.

• Keywords: usluge s dodanom vrijednošću; sigurnost; zaštita; procesni model; inženjerstvo zahtjeva; sigurnosni zahtjevi
• Keywords (english): value-added services; safety; security; process model; requirements engineering; security requirements
• Language: croatian
• URN:NBN: urn:nbn:hr:168:237267
• Study programme: Title: Postgraduate master programme in electrical engineering; Study programme type: university; Study level: postgraduate; Academic / professional title: Magistar znanosti elektrotehnike (Magistar znanosti elektrotehnike)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2020-04-19 06:22:45