A standard-compliant integrated security framework

Authors:
Hassen Sallay;Khaled Al-Shalfan
Affiliations:
Research Center & Scientific Consultations, College of Computer Science & Information Systems, Al-Imam Mohammad Bin Saud Islamic University, Riyadh, Saudi Arabia;Research Center & Scientific Consultations, College of Computer Science & Information Systems, Al-Imam Mohammad Bin Saud Islamic University, Riyadh, Saudi Arabia
Venue:
ISPACT'10 Proceedings of the 9th WSEAS international conference on Advances in e-activities, information security and privacy
Year:
2010

Citing 5
Cited 0

Security modelling for organisations

CCS '94 Proceedings of the 2nd ACM Conference on Computer and communications security
A Framework for Multi-Agent System Engineering using Ontology Domain Modelling for Security Architecture Risk Assessment in E-Commerce Security Services

NCA '04 Proceedings of the Network Computing and Applications, Third IEEE International Symposium
VIsualizing Enterprise-Wide Security (VIEWS)

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference
A Collaborative Approach for Access Control, Intrusion Detection and Security Testing

CTS '06 Proceedings of the International Symposium on Collaborative Technologies and Systems
A survey of active network research

IEEE Communications Magazine

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security intrusion incidents have dramatically risen over the last decade. The organizations are becoming more and more aware of the importance of safeguarding their critical information. They need also to measure the degree of compliance of their security measures with the standards to enhance their degree of security, avoid the lack of accountability problem, and satisfy the regulatory obligations. While there are many tools and practices that can reduce security risks, there is a real need for security framework that specifies a security model and architecture in order to satisfy these security requirements. In this paper, we propose a preliminary specification of such a framework. A security model as well as an architecture able to perform automated and procedural security safeguards are proposed. In addition, an implementation guideline of the proposed architecture (AMANSystem) based on active network approach is presented.