Vorträge und Posterpräsentationen (mit Tagungsband-Eintrag):
R. Montesino, S. Fenz:
"Information security automation: how far can we go?";
Vortrag: Sixth International Conference on Availability, Reliability, and Security (ARES 2011),
Vienna;
22.08.2011
- 26.08.2011; in: "Proceedings of the Sixth International Conference on Availability, Reliability, and Security (ARES 2011)",
IEEE,
(2011),
ISBN: 978-0-7695-4485-4;
S. 280
- 285.
Kurzfassung englisch:
Information security management is a very complex task which involves the implementation and monitoring of more than 130 security controls. To achieve greater efficiency in this process it is necessary to automate as many controls as possible. This paper provides an analysis of how many controls can be automated, based on the standards ISO 27001 and NIST SP800-53. Furthermore, we take the automation potential of controls included in the Consensus Audit Guidelines into account. Finally, we provide an overview of security applications that support automation in the operation of information security controls to increase the efficiency of information security management.
"Offizielle" elektronische Version der Publikation (entsprechend ihrem Digital Object Identifier - DOI)
http://dx.doi.org/10.1109/ARES.2011.48