{'fraction_non_alphanumeric': 0.012168141592920354, 'fraction_numerical': 0.0, 'mean_word_length': 5.654411764705882, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 6, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Integrating Security into Information Systems Development : A Socio-Technical View

This paper provides a framework to reconcile the apparent duality between Information Systems Development and Information Systems Security Development. Though there is a substantial foundation of literature on approaches and methodologies for Information Systems Development as well as for Information systems Security Development, the two are not well integrated. Part of the cause of the continuing problems with information systems security is the often ad hoc security implementation. This "security after the fact" can lead to incompatibility between the system and the security of the system. It appears that a theoretically grounded and methodological approach for integrating security with Information Systems Development has been lacking. This paper proposes a basic framework as a step toward such an approach.