Retrofitting Security into a Web-Based Information System

TL;DR

This paper presents an incremental approach to enhance security in existing web-based information systems, demonstrating its application on a prototype to retrofit security features effectively.

Contribution

It introduces a novel incremental method for adding security to legacy and prototype systems, with practical demonstration on a web-based system.

Findings

Successful application of the incremental security retrofit method

Enhanced security features integrated into an existing web system

Practical demonstration of the approach's effectiveness

Abstract

This paper reports on an incremental method that allows adding security mechanisms to an existing, but insecure system, such as a prototype or a legacy system. The incremental method is presented and as a showcase its application is demonstrated at the example of a Web-based information system.