Browse By Repository:

 
 
 
   

Technical Security Metrics Model in Compliance with ISO/IEC 27001 Standard

M.P. Azuwa, Azuwa and Ahmad, Rabiah and Sahib, Shahrin and Shamsuddin, Solahuddin (2012) Technical Security Metrics Model in Compliance with ISO/IEC 27001 Standard. The Society of Digital Information and Wireless Communication. ISSN 2305-0012

[img] PDF
00000366.pdf

Download (403Kb)

Abstract

Technical security metrics provide measurements in ensuring the effectiveness of technical security controls or technology devices/objects that are used in protecting the information systems. However, lack of understanding and method to develop the technical security metrics may lead to unachievable security control objectives and inefficient implementation. This paper proposes a model of technical security metrics to measure the effectiveness of network security management. The measurement is based on the security performance for (1) network security controls such as firewall, Intrusion Detection Prevention System (IDPS), switch, wireless access point and network architecture; and (2) network services such as Hypertext Transfer Protocol Secure (HTTPS) and virtual private network (VPN). The methodology used is Plan-Do-Check-Act process model. The proposed technical security metrics provide guidance for organizations in complying with requirements of ISO/IEC 27001 Information Security Management System (ISMS) standard. The proposed model should also be able to provide a comprehensive measurement and guide to use ISO/IEC 27004 ISMS Measurement standard.

Item Type: Article
Subjects: T Technology > T Technology (General)
Divisions: Faculty of Information and Communication Technology > Department of System and Computer Communication
Depositing User: PROFESOR MADYA DR MOHD KHANAPI ABD GHANI
Date Deposited: 28 Jan 2013 02:49
Last Modified: 28 May 2015 03:43
URI: http://eprints.utem.edu.my/id/eprint/6600

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year