Odločitveni model za podporo pri izdelavi informacijske varnostne politike

Milanič, Egon

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	Odločitveni model za podporo pri izdelavi informacijske varnostne politike
Authors:	ID Milanič, Egon (Author) ID Rajkovič, Vladislav (Mentor) More about this mentor...
Files:	MAG_Milanic_Egon_2009.pdf (3,12 MB) MD5: 01ED4046380230119399EA3110628B1A PID: 20.500.12556/dkum/925c9c0b-791b-48c4-adc1-36c5eed8abd7
Language:	Slovenian
Work type:	Master's thesis
Organization:	FOV - Faculty of Organizational Sciences in Kranj
Abstract:	Magistrsko delo obravnava proces ocenjevanja varnosti informacijskih sistemov na področju nadzora dostopa. V programskem orodju DEXi, lupini ekspertnega sistema za interaktivno gradnjo baze znanja, ocenjevanja variant in razlago dobljenih rezultatov, smo razvili prototip večkriterijskega hierarhičnega odločitvenega modela za vrednotenje varnosti informacijskih sistemov državnega organa. Pri gradnji odločitvenega modela smo upoštevali Priporočila za pripravo informacijske varnostne politike ter standard ISO/IEC 27002:2005 (pred preimenovanjem ISO/IEC 17799:2005), ki sta služila kot osnova za identifikacijo in strukturiranje kriterijev. Nadzor dostopa je ključen za vzpostavitev ustrezne informacijske varnosti saj z njim zagotavljamo ustrezen dostop pooblaščenim uporabnikom ter hkrati preprečujemo dostop nepooblaščenim. Predstavljeni računalniško podprti prototip odločitvenega modela je namenjen organu državne uprave v pomoč pri pripravi informacijske varnostne politike v fazi iskanja ukrepov, ki bistveno prispevajo k povečanju varnosti informacijskih sistemov na področju nadzora dostopa.
Keywords:	Informacijska varnost, informacijska varnostna politika, nadzor dostopa, sistemi za podporo odločanju, večparametrsko odločanje, DEXi
Place of publishing:	Kranj
Year of publishing:	2009
PID:	20.500.12556/DKUM-12205
COBISS.SI-ID:	6567443
NUK URN:	URN:SI:UM:DK:R4WPMXKX
Publication date in DKUM:	15.12.2009
Views:	3280
Downloads:	494
Metadata:
Categories:	FOV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:	English
Title:	The decision-making model used to support the formulation of information security policy
Abstract:	The thesis discusses the process of evaluating information system security in the field of access control. A pilot multi-attribute hierarchical decision-making model has been developed in the DEXi program tool – an expert system shell for interactive construction of a knowledge base, evaluation of options and interpretation of results – in order to assess security of the information system used by a public administration body. The construction of the decision-making model followed the recommendations on information security policy and the ISO/IEC 27002:2005 standard (formerly known as ISO/IEC 17799:2005), which served as a basis for identifying and structuring criteria. Access control is crucial in providing a satisfactory level of information security because it allows appropriate access to authorised users and prevents access to unauthorised users. The computer-supported pilot decision-making model presented here is intended for a public administration body as assistance in designing its security policy in the phase of identifying measures that can contribute crucially to enhanced information system security in the field of access control.
Keywords:	Information security, information security policy, access control, decision support systems, multi-attribute decision-making, DEXi

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back