A paradigmatic analysis of conventional approaches for developing and managing secure IS

摘要: Because the methods of development for Information Systems (IS) do not pay attention to security aspects, several information systems (ISS) have been presented. This paper will analyze traditional/conventional approaches, namely normative standards (e.g. checklists, management and evaluation standards), formal methods, common sense principles risk management. These approaches be analyzed in light I) research objectives; II) organizational role IS security; III) used; IV) applicability; V) a conceptual meta-model IS. The contribution is twofold. First analysis sheds hew on underlying foundations conventional approaches. Second, suggests implications researchers practitioners.