Development of metamodel for information security risk management

Nowadays, information technology and information system have been used widely in many fields such as in business, education, marketing, transportation, medical and many other fields. In information technology and system field, a security aspect plays a vital role and thus become a challenging issue....

Full description

Saved in:

Bibliographic Details
Main Author:	Mohammed Ba Muqabel, Mohammed Salem
Format:	Thesis
Language:	English
Published:	2013
Subjects:	QA75 Electronic computers Computer science
Online Access:	http://eprints.utm.my/id/eprint/37027/5/MohammedSalemMohammedMFSKSM2013.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-utm-ep.37027
record_format	uketd_dc
spelling	my-utm-ep.370272017-07-17T04:30:46Z Development of metamodel for information security risk management 2013-06 Mohammed Ba Muqabel, Mohammed Salem QA75 Electronic computers. Computer science Nowadays, information technology and information system have been used widely in many fields such as in business, education, marketing, transportation, medical and many other fields. In information technology and system field, a security aspect plays a vital role and thus become a challenging issue. Thus security should be ready installed and resistance to various numbers of potential attacks. In Information Security and Information Technology, it is important to decide what countermeasures that could potentially harm the organization from achieving their business objectives. Reducing risk to an acceptable level is among the main target of the risk management process. On other hand, the main reasons to fail in Information Security Risk Management (ISRM) is the complexity and inflexibility of the existing models. Domain modulars usually spend a lot of times to understand the nature of the domain which they desire to model. Even though there are many existing ISRM models appears, but to find a suit model which could provide a straight guideline to the ISRM users based on their own problems are limited. To solve this issue, this project follows seven steps to create a generic metamodel which can describe the semantics of ISRM models and its solutions through one unified model. Then validates ISRM by three validation techniques; Frequency-based Selection, Face validity and Tracing technique. Through the metamodel various risk management problems faced by different levels of ISRM users can be solved based on the problem attributes such as, risk determination specific to a firewall vulnerability problems, risk assessment for an information security project management. Directly, this can help many users/newcomers to this domain to easy understand the concepts required for their own information security risk problem. 2013-06 Thesis http://eprints.utm.my/id/eprint/37027/ http://eprints.utm.my/id/eprint/37027/5/MohammedSalemMohammedMFSKSM2013.pdf application/pdf en public http://dms.library.utm.my:8080/vital/access/manager/Repository/vital:70092?site_name=Restricted Repository masters Universiti Teknologi Malaysia, Faculty of Computing Faculty of Computing
institution	Universiti Teknologi Malaysia
collection	UTM Institutional Repository
language	English
topic	QA75 Electronic computers Computer science
spellingShingle	QA75 Electronic computers Computer science Mohammed Ba Muqabel, Mohammed Salem Development of metamodel for information security risk management
description	Nowadays, information technology and information system have been used widely in many fields such as in business, education, marketing, transportation, medical and many other fields. In information technology and system field, a security aspect plays a vital role and thus become a challenging issue. Thus security should be ready installed and resistance to various numbers of potential attacks. In Information Security and Information Technology, it is important to decide what countermeasures that could potentially harm the organization from achieving their business objectives. Reducing risk to an acceptable level is among the main target of the risk management process. On other hand, the main reasons to fail in Information Security Risk Management (ISRM) is the complexity and inflexibility of the existing models. Domain modulars usually spend a lot of times to understand the nature of the domain which they desire to model. Even though there are many existing ISRM models appears, but to find a suit model which could provide a straight guideline to the ISRM users based on their own problems are limited. To solve this issue, this project follows seven steps to create a generic metamodel which can describe the semantics of ISRM models and its solutions through one unified model. Then validates ISRM by three validation techniques; Frequency-based Selection, Face validity and Tracing technique. Through the metamodel various risk management problems faced by different levels of ISRM users can be solved based on the problem attributes such as, risk determination specific to a firewall vulnerability problems, risk assessment for an information security project management. Directly, this can help many users/newcomers to this domain to easy understand the concepts required for their own information security risk problem.
format	Thesis
qualification_level	Master's degree
author	Mohammed Ba Muqabel, Mohammed Salem
author_facet	Mohammed Ba Muqabel, Mohammed Salem
author_sort	Mohammed Ba Muqabel, Mohammed Salem
title	Development of metamodel for information security risk management
title_short	Development of metamodel for information security risk management
title_full	Development of metamodel for information security risk management
title_fullStr	Development of metamodel for information security risk management
title_full_unstemmed	Development of metamodel for information security risk management
title_sort	development of metamodel for information security risk management
granting_institution	Universiti Teknologi Malaysia, Faculty of Computing
granting_department	Faculty of Computing
publishDate	2013
url	http://eprints.utm.my/id/eprint/37027/5/MohammedSalemMohammedMFSKSM2013.pdf
_version_	1747816493230325760

Development of metamodel for information security risk management

Similar Items