Modelling, Analysis, Experimental Validation and Verification of Information Security Systems in Corporate Environment

Ivan Gaydarski; Zlatogor Minchev

Modelling, Analysis, Experimental Validation and Verification of Information Security Systems in Corporate Environment

it4sec_reports_132.pdf

Publication Type:

Report

Authors:

Ivan Gaydarski; Zlatogor Minchev

Source:

IT4Sec Reports, Institute of Information and Communication Technologies, Number 132, Sofia, p.1-28 (2019)

Keywords:

Design of information security systems, DLP, interactive verification, multi-agent modelling & simulation, stochastic validation, UML architectural meta-design

Abstract:

<p>The publication presents an exploration approach for studying data protection in security systems within corporate environment. The approach is including: conceptual UML architecture design, together with further multi-agent system-of-systems modeling and holistic sensitivity analysis. The obtained results are next validated via an ad-hoc stochastic simulation, assuring expert, sensors’ and machine-generated data flows fusing and usage. Finally, an interactive verification is performed with virtual corporate environment and futuristic, fictitious scenario dynamic observations of both trainees & technologies. An implementation of DLP monitoring for multiple data states and attacks jointly with selected set of users’ feedback assessments are given in conclusion, assuring comprehensiveness of the obtained results.</p>

10436 reads
Google Scholar
DOI
RTF
EndNote XML

References

Hintzbergen, J., K. Hintzbergen, A. Smulders, and H. Baars. Foundations of Information Security Based on ISO27001 and ISO27002. Van Haren Publishing, 2010.

ISO 27001 Official Page., 2019.

COBIT Security Baseline: An Information Survival Kit. 2nd Edition. IT Governance Institute, 2007.

COBIT resources., 2019.

NIST Special Publications (800 Series)., 2019.

Gramm-Leach-Bliley Act (GLBA) Resources., 2019.

Anand, S.. Sarbanes-Oxley Guide for Finance and Information Technology Professionals. Wiley, 2006.

Sarbanes-Oxley Act., 2019.

Herold, R., and K. Beaver. The Practical Guide to HIPAA Privacy and Security Compliance. 2nd ed. CRC Press, 2014.

PCI Security Standards., 2019.

IEEE Std 1471 In IEEE Recommended Practice for Architectural Description of Software-Intensive Systems., 2000.

ISO/IEC/IEEE 42010:2011 – Systems and Software Engineering – Architecture Description., 2019.

DeviceLock Web Page., 2019.

CoSoSys Endpoint Protector Web Page., 2019.

EU General Data Protection Regulation (Official Web Page)., 2019.

The Unified Modeling Language (UML) Web Page., 2019.

System Analysis & Design – An Object-Oriented Approach with UML. 5th ed. John Wiley & Sons, 2015.

Hilliard, R.. "Aspects, Concerns, Subjects, Views." In First Workshop on Multi- Dimensional Separation of Concerns in Object-Oriented Systems (OOPSLA’99)., 1999.

Gaydarski, I., and Zlatogor Minchev. Conceptual Modeling of an Information Security System and Its Validation through DLP Systems In BISEC. Belgrade, Serbia, 2017.

Hilliard, R.. "Lessons from the Unity of Architecting." In Systems Context, 225-250. 7 Systems, 2016.

Monitor, ISIJ. "Information Security Architecture: An Integrated Approach to Security in the Organization." Information & Security: An International Journal 4 (2000): 116.

Industrial Internet of Things Volume G4: Security Framework., 2017.

Rhodes-Ousley, M.. Information Security the Complete Reference. 2nd ed., 2013.

System Analysis & Design – An Object-Oriented Approach with UML. 5th ed. John Wiley & Sons, 2015.

Gaydarski, I., Zlatogor Minchev, and R. Andreev. "Model Driven Architectural Design of Information Security System." In 14th International Conference on Information Assurance and Security (IAS 2018). Porto, Portugal, 2018.

Tisue, S., and U. Wilensky. NetLogo: A simple environment for modeling complexity In International Conference on Complex Systems. Boston, 2014.

NetLogo - Center for Connected Learning and Computer Based Modeling. Evanston, Illinois, USA: Northwestern University, 2019.

Sycara, Katya P.. "Multiagent systems." AI Magazine 18 (1998).

Vester, Frederic. The Art of Interconnected Thinking – Ideas and Tools for Dealing with Complexity. München: MCB-Verlag, 2007.

Minchev, Zlatogor. Methodological Approach for Modelling, Simulation & Assessment of Complex Discrete Systems In National Informatics Conference Dedicated to 80-th Anniversary of Prof. Petar Barnev. Sofia, Bulgaria: Institute of Mathematics & Informatics, Bulgarian Academy of Sciences, 2016.

Boyanov, Lyuben, and Zlatogor Minchev. Cyber Security Challenges in Smart Homes In NATO ARW “Best Practices and Innovative Approaches to Develop Cyber Security and Resiliency Policy Framework". Vol. 38. Ohrid, Macedonia: OS Press, NATO Science for Peace and Security Series - D: Information and Communication Security, 2013.

Gaydarski, I., and Z. Minchev. "Challenges to Data Protection in Corporate Environment." In Future Digital Society Resilience in the Informational Age. Sofia: Institute of ICT, Bulgarian Academy of Sciences, SoftTrade, 2018.

Chen, Peter. "The Entity-Relationship Model-Toward a Unified View of Data." ACM Transactions on Database Systems 1, no. 1 (1976): 9-36.

Minchev, Zlatogor. Data Relativities in the Transcending Digital Future In BISEC 2018. Belgrade, Serbia, 2018.

Minchev, Zlatogor, and Georgi Dukov. "Cyber Intelligence Decision Support in the Era of Big Data." In ESGI 113 Problems & Final Reports Book, 85-92. Sofia: Fastumprint, 2015.

Minchev, Zlatogor. Security Challenges to Digital Ecosystems Dynamic Transformation In BISEC 2017. Belgrade, Serbia, 2017.

Gaydarski, I., and Zlatogor Minchev. Virtual Enterprise Data Protection: Framework Implementation with Practical Validation In BISEC 2018. Belgrade, Serbia, 2018.

Data Breach Investigations Report. Verizon, 2018.

Alhir, S.. "Understanding the Model Driven Architecture (MDA)." Methods & Tools 11, no. 3 (2003): 17-24.

Breu, R., R. Grosu, F. Huber, B. Rumpe, and W. Schwerin. "Systems, Views and Models of UML." In The Unified Modeling Language, Technical Aspects and Applications, 3-8. Heidelberg: Physica Verlag, 1998.

Forrester, J.. World Dynamics. Cambridge, Massachusetts: Wright-Allen Press, 1971.

Meadows, D., J. Randers, and D. Meadows. Limits to Growth: The 30-Year Update. Chelsea Green Publishing Company, 2004.

CYREX 2018 Web Page., 2019.

Gaydarski, I., P. Kutinchev, and Zlatogor Minchev. Modelling & Deployment of Data Protection Component of Information Security Systems In First International Interdisciplinary Conference on Information and Cyber Security-Global, ICICSG’2017. Istanbul, 2017.

Modelling, Analysis, Experimental Validation and Verification of Information Security Systems in Corporate Environment

Publication Type:

Authors:

Source:

Keywords:

Abstract:

References

Russia at War: Strategic Competition, Confrontation, and Conflict

Democratic Backsliding and Security Governance