A CONCEITUAL MODEL FOR ESPECIFICATION FOR SECURITY RISK MANAGEMENT OF INFORMATION SYSTEMS / UM MODELO CONCEITUAL PARA ESPECIFICAÇÃO DA GESTÃO DE RISCOS DE SEGURANÇA EM SISTEMAS DE INFORMAÇÃO

AUTOR(ES)
DATA DE PUBLICAÇÃO

2010

RESUMO

The lack of an alignment among concepts that involve security risk management has caused the stalemate in the adoption of security risks management models for organizations. There are several standards and risk management methodologies, having a large set of concepts, defined in many ways. In order to get an alignment of concepts and establish a suitable vocabulary for risk management, the conceptual modeling was used within the realm of security risks management. By using the conceptual modeling it was possible to abstract concepts and obtain a conceitual model for the specification of security risks management, called GRiSSI - Gestão de Riscos de Segurança de Sistemas de Informação (Information Systems Security Risk Management). Some metrics were also proposed for the identified concepts in the conceitual model, to make further improvements and corrections in security processes. The proposed conceitual model was validated through the application audits and metrics for UML models.

ASSUNTO(S)

modelagem conceitual engenharia de producao security metrics conceitual modeling sistemas de informação gestão de riscos de segurança métricas de segurança security risk management information systems

ACESSO AO ARTIGO

Documentos Relacionados