System security requirement identification of electronic payment system for angkot using NIST SP 800-160

Abstract

Electronic payments system for angkot is an example of information technology system. In developing information technology system, one important aspect to be considered is information security aspect. NIST publication recommends ways to incorporate security design principles and concept into system engineering, that is NIST SP 800-160 System Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems. This paper is part of the development framework of electronic payment system for angkot. Result from early stage research has built the prototype of microcontroller-based system. In this paper, conducted reengineering process with reference to the stage in NIST SP 800-160 document. Among 30 stages of the system engineering process described in the document, this paper emphasizes the early stages that is business/mission analysis process. The results are system security requirements to establish an electronic payment system of angkot.