Integrated security model for managing the security non-functional requirements at architectural design of internet-based systems

Security in software systems has gained too much attention by the industries, scientific organizations, banks and other areas for the last few decades. Developing secure software needs focus on both the functional and non-functional requirements. Functional requirements are taken into account during the early stages of development while unfortunately the non-functional requirements are either ignored or less considered which results in the high cost of maintenance after delivery of the software and may compromise the security. There exist many methodologies to deal security at the very beginning of the system development at architecture level; however, there are gaps in each approach to meet the desired security of internet-based systems. The existing approaches are described for analyzing and integrating the security at architectural level. This paper presents an integrated security model to deal with the system security requirements at architectural design level internet-based systems. The proposed integrated model is validated with the help of case study of online banking system.