Ontology-Based Evaluation of ISO 27001 - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2010

Ontology-Based Evaluation of ISO 27001

Résumé

Information security risks threaten the ability of organizations of reaching their operational and strategic goals. Increasing diversification of the information security landscapes makes addressing all risks a challenging task. Information security standards have positioned themselves as generic solutions to tackle a broad range of risks and try to guide security managers in their endeav ors. However, it is not evident if such standards have the required holis tic approach to be a solid foundation. In this paper a metamodel of the ISO 27001 security standard explicating its core concepts is presented. We then compare the constructed metamodel with various information security ontolo gies and analyze for comprehensiveness. We conclude with a discussion of core concepts in the information security domain.
Fichier principal
Vignette du fichier
i3e2010_submission_42.pdf (465.01 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01055030 , version 1 (11-08-2014)

Licence

Paternité

Identifiants

Citer

Danijel Milicevic, Matthias Goeken. Ontology-Based Evaluation of ISO 27001. 10th IFIP WG 6.11 Conference on e-Business, e-Services, and e-Society (I3E), Nov 2010, Buenos Aires, Argentina. pp.93-102, ⟨10.1007/978-3-642-16283-1_13⟩. ⟨hal-01055030⟩
119 Consultations
509 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More