Security analysis of e-government systems using SAT problem
DOI:
https://doi.org/10.17981/ingecuc.12.1.2016.07Keywords:
e-government, Security Management, Boolean satisfiability, Security Frameworks, Security Evaluation ModelAbstract
The proposal of this research is to evaluate e-government security systems with current security frameworks and the Boolean satisfiability bases. The proposed model consists of two segments: the construction of five security frameworks based on international standards and the construction of an evaluation model for administrative security. This proposal poses the security breach problem using mathematical models in order to determine whether a security strategy proposed by the e-government administrator is successful or not. The model has been implemented and powered with the safety indicators studied in order to provide administrators a tool that facilitates the process of analyzing the factors that are crucial for their security systems. This model is intended to help the decision-making process when adding or taking out safety factors that have demonstrated optimum results in the experimental stage.
Downloads
References
G. Dhillon y G. Torkzadeh, "Value-focuse dassessment of information system security in organizations," Inf. Syst. J., vol. 16, no. 3, pp. 293–314, Jul. 2006. http://dx.doi.org/10.1111/j.1365-2575.2006.00219.x
A. García Cervigon Hurtado y M. P. Alegre Ramos, Seguridad Informática., 1st ed. Espa-a: Paraninfo, 2011.
W. Al-Ahmad y R. Al-Kaabi, "An extended security framework for e-government," in 2008 IEEE International Conference on Intelligence and Security Informatics, 2008, pp. 294–295. http://dx.doi.org/10.1109/ISI.2008.4565091
International Organization for Standardization, "ISO 27000." [En línea]. Disponible en: http://www.27000.org/.
P. Mell y T. Grance, The NIST Definition of Cloud Computing. Estados Unidos: National Institute of Standards and Technology, 2011.
S. Paquette, P. T. Jaeger y S. C. Wilson, "Identifying the security risks associated with governmental use of cloud computing," Gov. Inf. Q., vol. 27, no. 3, pp. 245– 253, Jul. 2010.
http://dx.doi.org/10.1016/j.giq.2010.01.002
International Organization for Standardization, "ISO 38500." [En línea]. Disponible en: http://www.38500.org/
International Organization for Standardization, "ISO/ IEC 20000," 2011. [En línea]. Disponible en: http://www.iso.org/iso/catalogue_detail?csnumber=51986.
"IT Governance - Governance, Risk Management and Compliance for Information Technology." [En línea]. Disponible en: http://www.itgovernance.co.uk/.
"Best Practice in IT Service Management, Project Management& Cyber." [En línea]. Disponible en: https://www.axelos.com/.
Unión Europea, "Council Directive 2008/114/EC," Off. J. Eur. Union, pp. 75–82, 2008.
"Homeland Security." [En línea]. Disponible en: http://www.dhs.gov/.
H. Mangassarian, A. Veneris y F. N. Najm, "Maximum Circuit Activity Estimation Using Pseudo-Boolean Satisfiability," IEEE Trans. Comput. Des. Integr. Circuits Syst., vol. 31, no. 2, pp. 271–284, Feb. 2012.
http://dx.doi.org/10.1109/TCAD.2011.2169259
L. De Moura y N. Bjørner, "Satisfiability module theories," Commun. ACM, vol. 54, no. 9, p. 69, Sep. 2011. http://dx.doi.org/10.1145/1995376.1995394
"The Boolean Satisfaction and Optimization Library in Java." [En línea]. Disponible en: http://www.sat4j.org/.
M. M. Baquerizo Anastacio, "Modelo de Seguridad para Sistemas e-gobierno mediante satisfactibilidad booleana," [Tesis de maestría], Dept. Arq. Comp. And Autom., Univ. Complutense de Madrid, Madrid, Espa-a, 2014.
Downloads
Published
How to Cite
Issue
Section
License
Published papers are the exclusive responsibility of their authors and do not necessary reflect the opinions of the editorial committee.
INGE CUC Journal respects the moral rights of its authors, whom must cede the editorial committee the patrimonial rights of the published material. In turn, the authors inform that the current work is unpublished and has not been previously published.
All articles are licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.