A process model design and tool support for information assets access control using security patterns

Information assets such as customer information, business transaction, and contract transaction data are important for the organization as these assets affect business value and operation. Therefore, to manage information assets, the organization needs to establish the security system, one of the no...

Full description

Saved in:
Bibliographic Details
Published in2011 Eighth International Joint Conference on Computer Science and Software Engineering (JCSSE) pp. 307 - 312
Main Authors Ratchakom, M., Prompoon, N.
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.05.2011
Subjects
Access Control
Information Asset
Process Model Design
Security Patters
Online AccessGet full text

Cover

More Information
Summary:Information assets such as customer information, business transaction, and contract transaction data are important for the organization as these assets affect business value and operation. Therefore, to manage information assets, the organization needs to establish the security system, one of the non-functional requirements, to control the resource accessibility. The security patterns provide practices for formal security process establishment which could be applied to assets access control. However, the security patterns explanations are specific but an applying has to define process operation in details. This research proposes a design of process model for Information Assets Access Control (IAAC) using security patterns. In addition, the proposed process model also uses ISO/IEC 27001:2005 and ISO/IEC 27002:2005 as a fundamental framework. The supporting templates are also designed to support the proposed process model.
ISBN:9781457706868
1457706865
DOI:10.1109/JCSSE.2011.5930139