Integral engineering technique for information security methodologies

Authors:
Alexander V. Lyubimov
Affiliations:
Saint-Petersburg State Polytechnical University, Saint-Petersburg, Russia
Venue:
Proceedings of the 3rd international conference on Security of information and networks
Year:
2010

Citing 2
Cited 0

Semiformal Approach to the IT Security Development

DEPCOS-RELCOMEX '07 Proceedings of the 2nd International Conference on Dependability of Computer Systems
The ISMS Business Environment Elaboration Using a UML Approach

Proceedings of the 2005 conference on Software Engineering: Evolution and Emerging Technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

A standards-based information security methodologies integral engineering (ISIE) technique is proposed that makes it possible to develop reliable and multipurpose procedural foundation for solving a wide range of theoretical and practical information security problems. The main technique matter concerns designing a generalized primary (root) semiformal (DFD and UML) domain models system that serves as the source for a wide range of secondary (derived) models for particular information security problems. Within the ISIE framework, the derived models are obtained from the root model by extracting the necessary (for a given particular problem) partial model and its subsequent regulated modification: supplement, generalization, evolving etc. With these operations, the derived models, in general, remain coordinated with the root model and the corresponding IS standard that ensures the possibility of reuse of every particular derived model in other tasks. The application of the proposed technique in several specific information security organizational problems is discussed, alongside with some logical schemes of common engineering operations.