Thursday, January 27, 2011

Security Architecture – moving forward with an approach to outline a framework

It is a key success criteria in system development and architecture to improve and extend models, procedures and underlying frameworks. This is especially needed when it comes to cyber security of complex systems. I started recently to improve my framework for a robust security architecture. Many stakeholders tend to start with the details in such complex systems which may result in missing overall requirements and ramifications. Security in the scope of vast, distributed systems needs to be specified, designed, implemented and operated based on a solid framework – let’s call it a Security Architecture. I have seen many approaches in order to cover this tricky task. Many of them tend to be too complex. Unfortunately, complexity is not a driver for security (in contrast to simplicity). On the other hand, it’s a tough job to keep the Security Architecture for huge systems simple. Beside the need for a simple approach, transparency and clearness in the scope of Security Architecture are important attributes that should be addresses as key-objective. Security controls need to be structured and encapsulated in the relevant components of the Security Architecture in a clear and traceable manner. I prefer a structure consisting of the following main components:

  1. Security Infrastructure [ Communication and Network Security, Perimeter Security, …]
  2. System Security Services [ Access Control, Identity Management, Credential Management, Audit, Backup and Recovery, …]
  3. Application Security [ Operation Systems, Databases, Web and Application Server, SaaS, Enterprise Applications, Collaboration, and Messaging, … ]
  4. Service Security [ System Maintenance, System Operation, Change Management, Incident Management, Event Management and Forensics, Stakerholder & User Feedback, ...]
  5. Security Management [ Policies and Roles, Risk Management, Training and Awareness, Secure Coding, Design Principles, Algorithms]
The components 1-4 are the basic layers of the Security Architecture. A more vertical component is Security Management which covers and affects all the other 4 essential parts of the Security Architecture.

12 comments:

Anonymous said...

mer2wdba53 http://www.qxwchina.com/bbs//forum.php?mod=viewthread&tid=16267&extra=

lsnj7tks83 http://www.icesi.edu.co/foros/viewtopic.php?f=15&t=39998

vy8fgyus60 http://test.yeswan.com/dx15/bbs/forum.php?mod=viewthread&tid=231523&extra=

ouyx0piv20 http://s3.forum.hoolsgame.com/viewtopic.php?f=7&t=75153&p=111738#p111738

Anonymous said...

Greetings! I've been following your web site for some time now and finally got the bravery to go ahead and give you a shout out from Lubbock Tx! Just wanted to tell you keep up the great work!
My weblog :: on front page

Anonymous said...

wjd0ovij23 http://www.rvproblems.com/viewtopic.php?f=8&t=933637

hhlu4yrg74 http://www.shoppinglifes.com/bbs//viewthread.php?tid=287522&extra=

ec7mycde73 http://sky008.114.at/viewthread.php?tid=71174&extra=

uogn3wwe28 http://j2000.chad.ch/forum/viewtopic.php?pid=138957#p138957

Anonymous said...

I loved as much as you will receive carried out right
here. The sketch is tasteful, your authored material stylish.
nonetheless, you command get got an impatience over that
you wish be delivering the following. unwell unquestionably come further
formerly again since exactly the same nearly a lot often inside case you shield
this hike.
Also visit my web page read more

Anonymous said...

I loved as much as you will receive carried out right here.

The sketch is tasteful, your authored material
stylish. nonetheless, you command get got
an impatience over that you wish be delivering the following.
unwell unquestionably come further formerly again since exactly the
same nearly a lot often inside case you shield this hike.
Also see my web page: read more

Anonymous said...

- As a certified UGGs fan, you should consistently have your eyes peeled for discount offers for UGGs for sale. Some stores might have a discount sale in thoughts as a gimmick to draw droves of people a handful of days or weeks prior to Christmas. Others may also have sales following Christmas to get rid of old stock.
Want for acquiring a remarkable Women Cardy UGG Boots of the woman, it is essential to devote curiosity to detail! Females Cardy UGG Boots in plan is 100 on person commodities, in life, it all star will make successful weapon. Harsh winters, barefoot placing on luzhi boots, pretended for finding elegant, severely really cold, but near to the demeanour and temperatures selection, individual exclusive selection. But at this time, pick what sort of Females Cardy UGG Boots has turn into specifically crucial,
Whether you believe Ugg boots are in or out, there is no denying they are toasty warm. But, these boots are also pricey and not every person wants to put on a sheep's skin [url=http://www.mpboots.co.uk]ugg boots sale[/url]
on their feet. Ugg has place out a new line of sweater boots that are designed to appear like your favorite sweater.
Acquiring cheap sunglasses does not necessarily imply that you are just acquiring poor top quality sunglasses. You can easily get low cost sunglasses on line from all the well-known designers. The on the internet rates for sun glasses are a lot less costly than you would pay in a standard shop and you have a significantly wider choice of designer sun glasses to choose from
D s locations could be irri as result of hemorrhoid st ups. That will c damage to outlet of any fragile bloo vessels, an hemorrhaging can lea to. Rustic handcrafted lighting scratching efficiently e non perman relief the long t normally not sincerely worth As an alter scratching, tr applying hemorrhoid pa relief creme or ge /,
Just following cleaning and brushing cheap ugg boots, spray the outdoors of the boots with the waterproof protector. The protector, or repellant as it is labeled, must come with your UGG care kit. Adhere to the exact same approach as the cleaning but use the repellant far more lightly than the cleaning spray.
davidw - your comments make best sense. Nevertheless, keep in mind you advertise this blog as unfiltered and uncensored. So its somewhat ambigueos, in its message. Considering that Oakley came out with [url=http://www.mpboots.co.uk]cheap ugg boots[/url]
its line of designer sun glasses for these involved in outdoor sports, several other designers have jumped on the bandwagon. The most current line of biking sunglasses to hit the market make you appear like an insect with the design of the frames. Cyclists like them though since they are tight fitting and offer you the protection that they require.

Anonymous said...

When you shop on the internet, it becomes tough to differentiate among the fake and genuine UGG boots. So, make certain that you [url=http://www.dolasell.org]cheap uggs[/url]
check the returns policy of the retailer. They must take care of manufacturing faults, if any and shipping damage also. The specific Uggs, I felt, got significantly far more cushioning as nicely as the diploma had not been because challenging while my EMUs. Your trunk just isn as large because my individual EMUs often. It might be due to the diverse soles? No matter what, I pleased with my personal acquire,
These soldiers shot at the door and broke windows louvers ahead of gaining access to house to arrest these Christians young males. Greatest service you will receive from us. Any query please get in touch with with us, we are content to service for you, It does not make a difference if you are searching for mid calf boots or knee larger boots, you will wish to [url=http://www.dolasell.co.uk]ugg boots sale[/url]
make certain of the couple of things. The extremely first point you will wish to do is make particular you are not hunting for out ridiculous offers. Confident, everyone prefers to acquire the really finest offer out there, but actively hunting out "really inexpensive boots" along with other comparable circumstances when seeking roughly on the world wide web possibly is not the quite finest notion.
Fashion the ability to respond quite quickly, you can even locate in the wholesale market place of Beijing Zoo final Paris Mounted weeks new imitation income. This year, thought the hopeless predicament http://www.dolasell.org
of this brand, but sorrow discovered about the circle, can the jeans into the going is still only UGG. If you had the winter to travel to Beijing Maternity Hospital

Anonymous said...

Excellent blog you have here but I was wondering if you knew of any message boards that cover the same topics discussed in this
article? I'd really like to be a part of online community where I can get comments from other experienced people that share the same interest. If you have any recommendations, please let me know. Thanks a lot!
Also see my site: Click Here

Anonymous said...

hi!,I really like your writing so much! proportion we be in
contact extra about your article on AOL? I need a specialist on this house to resolve my problem.
May be that is you! Looking forward to see you.
Here is my site :: thanksgiving clipart images

Anonymous said...

look at [URL=http://e--store.com/]outlet louis vuitton[/URL] for more gxlYacHh [URL=http://e--store.com/ ] http://e--store.com/ [/URL]

Anonymous said...

Hey there I am so excited I found your webpage, I really found you by accident, while I was
researching on Bing for something else, Anyhow I am here now and would just like to say thanks
for a marvelous post and a all round entertaining blog (I also love the
theme/design), I don't have time to look over it all at the minute but I have bookmarked it and also included your RSS feeds, so when I have time I will be back to read a lot more, Please do keep up the excellent job.
Feel free to visit my web page - my latest blog post

Anonymous said...

buy proscar hong kong
[url=http://www.jnf.nl/swf/log/1/amoxil-500mg-antibiotic.html]amoxil 500mg antibiotic[/url]
levaquin 250 mg price
serious side effects depakote er
avodart side effects vision
http://www.jnf.nl/swf/log/31/que-es-cialis-5-mg.html