A web engineering security methodology for e-learning systems

Abstract

There is no one-stop shop protection method that can meet all the security requirements and design specifications of new or existing distributed e-learning systems. However, a novel web engineering security methodology, based on software engineering principles, could help to secure these systems. In this proposed methodology, security needs to be built into all phases of the System Development Life Cycle (SDLC). Many universities now employ e-learning systems, but security is often an afterthought. Their ICT organisations still use ad hoc security tools such as firewalls and anti-virus software that are not capable of offering sufficient security. This is because firewalls and anti-virus cannot distinguish between an original HTTP conversation and faked or compromised connections. Dr Shadi Aljawarneh believes security should be an intrinsic part of the System Development Life Cycle (SDLC), and presents a web engineering security methodology, based on software engineering principles, to secure distributed e-learning systems.