Design Procedure of IT Systems Security Countermeasures

Abstract

Abstract. The developers of the security policy should recognize the importance of building security countermeasures by using both technical and non-technical methods, such as personnel and operational facts. Security countermeasures may be made for formulating an effective overall security solution to address threats at all layers of the information infrastructure. This paper uses the security engineering principles for determining appropriate technical security countermeasures. It includes information on threats, security services, robustness strategy, and security mechanism. This paper proposes a countermeasure design flow that may reduce the threats to the information systems.

Collaborative risk method for information security management practices: A case context within Turkey

“…Security countermeasures may be established for formulating an effective overall security solution to address threats at all layers of the information infrastructure (Kim & Lee, 2005). Kim and Lee (2005) propose a method for the selection of countermeasures.…”

“…Security countermeasures may be established for formulating an effective overall security solution to address threats at all layers of the information infrastructure (Kim & Lee, 2005). Kim and Lee (2005) propose a method for the selection of countermeasures. In their method, information value, threat level, security services, the scope of security services are considered for selection of both technical and non-technical countermeasures.…”