Modellierung der Sicherheit von Informationssystemen mit DROPS
The complexity of an organization's security problem can be reduced by modelling security issues of business information systems. This facilitates analyzing and detecting security requirements and optimal operational alternatives (i.e. suitable security measures). DROPS (dimension-relational organization and problem oriented security model) is a model for the security of information systems enabling these issues. The approach DROPS is based on is holistic, integrative and scaleable. For example, security considerations concerning information systems are often limited to a technical perspective (IT-security). DROPS allows modelling a mere technical view as well as the integration of non-technical system components (e.g. personnell). Furthermore, non-technical security measures (e.g. organizational issues) can be included into the model. The composition of DROPS offers an organization the opportunity to integrate individual elements of a security problem and their relations. Essential characteristics of specific business processes can be considered this way. In practical application, first of all the choice of suitable security measures is facilitated. Second, DROPS can be used to model actual and/or aspired security requirements and the security system of an organization.
|Date of creation:||Jul 2004|
|Date of revision:|
|Contact details of provider:|| Postal: |
Phone: (0511) 762-5350
Fax: (0511) 762-5665
Web page: http://www.wiwi.uni-hannover.de
More information through EDIRC
When requesting a correction, please mention this item's handle: RePEc:han:dpaper:dp-301. See general information about how to correct material in RePEc.
For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: (Heidrich, Christian)
If references are entirely missing, you can add them using this form.