Software Engineering

E. S. Shameem Sulthana ¹, S. Kanmani ²

Affiliations
1 Department of Computer Science, Achariya Arts & Science College, Pondicherry-605013, IN
2 Department of Information Technology, Pondicherry Engineering College, Pondicherry, IN

Abstract

This work focus on using evidence for making access control decisions in present computing environments. These environments create new interaction scenarios that traditional access control approaches handle poorly. This approach views access control as the filtering of messages between communicating services. This work implements the evidence-based approach with a mechanism analogous to a network firewall, filtering messages going to and from a service.
The main goal of this work is it supports communication between parties in different trust domains, allow evidence associated with parties to be securely collected and evaluated for the purpose of allowing access to resources, create an ecosystem in which evidence providers can flourish.
This will describe the design of the evidence-based access models; discuss usage scenarios, and present preliminary results.
The results suggest that this approach is flexible enough to accommodate interesting present computing scenarios and efficient enough to implement on small devices.

Keywords

Access Control, Evidence, Firewall, Security, Web Services.

Full Text

     

N. Kayarvizhy ¹, S. Kanmani ²

Affiliations
1 Department of Computer Science and Engineering, AMC Engineering College, Bangalore-83, IN
2 Department of Information Technology, Pondicherry Engineering College, Puducherry-605014, IN

Abstract

Object oriented systems are the main choice in the world scene today for development of high quality systems and object oriented metrics are shaping the way quality is perceived in these systems. This paper does an evaluation of the suitability of the various object oriented metrics across three popular Object Oriented programming languages-C++, Java and C#. The paper then analyzes the results that are arrived at. These evaluation results will help in selecting the proper set of metrics for a particular object oriented language.

Keywords

Cohesion, Coupling, Inheritance, Interface, Object Oriented Metrics, Object Oriented Programming, Software Quality.

Full Text

     

P. Salini ¹, S. Kanmani ²

Affiliations
1 Department of Computer Science, Pondicherry Engineering College, IN
2 Department of Information Technology, Pondicherry Engineering College., IN

Abstract

Security engineering is a new research area in software engineering that covers the definition of processes, plans and designs for security. The researchers are working in this area and however there is a lack in security requirements treatment in this field. The security requirements is one of the non functional requirements which acts as constrains on the functions of the system. An increasing part of the communication and sharing of information in our society utilizes electronic media. Many organizations, especially distributed and Net-centric are entirely dependent on well functioning information systems. Thus IT security is becoming central to the ability to fulfill business goals, build trustworthy systems, and protect assets. In order to develop systems with adequate security features, it is essential to capture the corresponding security needs and requirements. Security requirements engineering is emerging as a branch of software engineering, spurred by the realization that security must be dealt with early during requirements phase. A number of researchers' proposals have major limitations as they treat security in system oriented terms. In this paper we present a view on Security Requirements, Security Requirements issues, types, and the framework for Security Requirements Engineering. We also have presented about the challenges to web application security and evaluated the Security Requirements Engineering framework for web applications.

Keywords

Security Engineering, Security Requirements Engineering, Security Requirements Engineering Framework, Web Applications.

Full Text