A multifaceted evaluation of the reference model of information assurance & security

Abstract

The evaluation of a conceptual model, which is an outcome of a qualitative research, is an arduous task due to the lack of a rigorous basis for evaluation. Overcoming this challenge, the paper at hand presents a detailed example of a multifaceted evaluation of a Reference Model of Information Assurance & Security (RMIAS), which summarises the knowledge acquired by the Information Assurance & Security community to date in one all-encompassing model. A combination of analytical and empirical evaluation methods is exploited to evaluate the RMIAS in a sustained way overcoming the limitations of separate methods. The RMIAS is analytically evaluated regarding the quality criteria of conceptual models and compared with existing models. Twenty-six semistructured interviews with IAS experts are conducted to test the merit of the RMIAS. Three workshops and a case study are carried out to verify the practical value of the model. The paper discusses the evaluation methodology and evaluation results.

Toward Confirming a Framework for Securing the Virtual Machine Image in Cloud Computing

“…Systems with high availability allow access to data all the time and prevent service disruptions due to hardware failure, system upgrades, power outages, power failure, and operating system or application problems [45]. All the experts agreed that the security framework designed to secure the VM image in cloud computing is comprehensive, with none of them adding more security requirements.…”

Modeling and verification of ATM security policies with SecBPMN

“…But this type of approaches are not usable with real case scenarios because of the high complexity of the languages. SecBPMN-ml, overcomes this limitation extending BPMN with security concepts about information assurance and security defined in [3]. Figure 1 shows part of a SecBPMN-ml model of a business process used in an airport information system where users can use different web-interfaces to select the best option for a flight, buy tickets and perform most of the bureaucratic processes required to take the flight.…”

“…icons with a solid orange circle), that represent security aspects defined in [3]. Each security annotation is detailed by a predicate which specifies further details on the security aspects of the business process.…”

Critical review attacks and countermeasures in internet of things enabled environments

“…Means Confidentiality, Integrity, and Availability. We listed from the various literature of security to provide security with CI3ATNRP extension to Basic CIA [14].…”