Fortification of IT Security by Automatic Security Advisory Processing

Fortification of IT Security by Automatic Security Advisory Processing. Fenz, S., Ekelhart, A., & Weippl, E. In 22nd International Conference on Advanced Information Networking and Applications (AINA2008), pages 575–582, 3, 2008.
doi abstract bibtex

The past years have seen the rapid increase of security related incidents in the field of information technology. IT infrastructures in the commercial as well as in the governmental sector are becoming evermore heterogeneous which increases the complexity of handling and maintaining an adequate security level. Especially organizations which are hosting and processing highly sensitive data are obligated to establish a holistic company- wide security approach. We propose a novel security concept to reduce this complexity by automatic assessment of security advisories. A central entity collects vulnerability information from various sources, converts it into a standardized and machine-readable format and distributes it to its subscribers. The subscribers are then able to automatically map the vulnerability information to the ontological stored infrastructure data to visualize newly-discovered software vulnerabilities. The automatic analysis of vulnerabilities decreases response times and permits precise response to new threats and vulnerabilities, thus decreasing the administration complexity and increasing the IT security level.

@InProceedings{Fenz2008a,
  author =    {Fenz, S. and Ekelhart, A. and Weippl, E.},
  title =     {Fortification of IT Security by Automatic Security Advisory Processing},
  booktitle = {22nd International Conference on Advanced Information Networking and Applications (AINA2008)},
  year =      {2008},
  pages =     {575--582},
  month =     {3},
  abstract =  {The past years have seen the rapid increase of security related incidents in the field of information technology. IT infrastructures in the commercial as well as in the governmental sector are becoming evermore heterogeneous which increases the complexity of handling and maintaining an adequate security level. Especially organizations which are hosting and processing highly sensitive data are obligated to establish a holistic company- wide security approach. We propose a novel security concept to reduce this complexity by automatic assessment of security advisories. A central entity collects vulnerability information from various sources, converts it into a standardized and machine-readable format and distributes it to its subscribers. The subscribers are then able to automatically map the vulnerability information to the ontological stored infrastructure data to visualize newly-discovered software vulnerabilities. The automatic analysis of vulnerabilities decreases response times and permits precise response to new threats and vulnerabilities, thus decreasing the administration complexity and increasing the IT security level.},
  doi =       {10.1109/AINA.2008.69},
  file =      {:Fortification.pdf:PDF},
  issn =      {1550-445X},
  keywords =  {ontologies (artificial intelligence);security of data;software development management;software reliability;IT infrastructures;IT security;automatic security advisory processing;information technology;newly-discovered software vulnerabilities;ontological stored infrastructure data;Business;Computer security;Data security;Data visualization;Humans;Information filtering;Information filters;Information security;Information technology;Ontologies}
}

Downloads: 0