NDLI: Information System's Security Evaluation of Dynamic Behavior Based on Service Composition

Content Provider	IEEE Xplore Digital Library
Author	DanChen Wang Yang Xu Peng Xu
Copyright Year	2015
Description	Author affiliation: Intell. Control Dev. Center, Southwest Jiao Tong Univ., Chengdu, China (Yang Xu; Peng Xu) \|\| Sichuan Inf. Security Testing Evaluation Center, Southwest Jiao Tong Univ., Chengdu, China (DanChen Wang)
Abstract	In the complex network environment, system service is dynamically adjusted according to the changes of user behavior and computing environment. Also, security strategy tends to be more dynamic based on the work flow, which will bring new challenges to the security evaluation of system operation. Therefore, this paper aims to regard the service composition business as research object, focusing on the analysis of security equipment's character that deployed by the system, abstracting the behavior of security service, classifying it to the business service, and systematically solving the security evaluation problems in business operation. Meanwhile, user behavior pattern is established on the cloud-model theory, and fully studied in the premise of ensuring the structural accuracy of work flow. Then, by analyzing the credibility of user behavior, the utility function is defined from the relation between threat and protection, and the security service efficiency identified by the change operation set of security service. Furthermore, a guaranteeing method is raised to the rational reconstruction by a security component, which produces an adequate redundant path of component service according to the existing executive record and logical structure, so as to reach the goal of ensuring the operation security of system business.
Starting Page	112
Ending Page	120
File Size	206084
Page Count	9
File Format	PDF
e-ISBN	9781467393232
DOI	10.1109/ISKE.2015.71
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-11-24
Publisher Place	Taiwan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Analytical models Systems operation Security service efficiency Data models Hardware Service composition transitional operation set of security service Security Object recognition Business process rationality User behavior Business
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Research on the equipment acquisition information service management based on ITIL

Evaluation and comparison of business process modeling methodologies for small and midsized enterprises

Implementing and Running Data-Centric Dynamic Systems

Experiences on the Use of Business Models for Identifying Quality Requirements for Information systems

Service Querying to Support Process Variant Development

Operation efficiency evaluation of bank based on super efficiency DEA model

SWAT: A Security Workflow Analysis Toolkit for Reliably Secure Process-aware Information Systems

An information system security dynamic assessment method using stochastic Petri net based on business flow

Analysing security requirements patterns based on problems decomposition and composition

Information System's Security Evaluation of Dynamic Behavior Based on Service Composition

Similar Documents

Research on the equipment acquisition information service management based on ITIL

Evaluation and comparison of business process modeling methodologies for small and midsized enterprises

Implementing and Running Data-Centric Dynamic Systems

Experiences on the Use of Business Models for Identifying Quality Requirements for Information systems

Service Querying to Support Process Variant Development

Operation efficiency evaluation of bank based on super efficiency DEA model

SWAT: A Security Workflow Analysis Toolkit for Reliably Secure Process-aware Information Systems

An information system security dynamic assessment method using stochastic Petri net based on business flow

Analysing security requirements patterns based on problems decomposition and composition

Information System's Security Evaluation of Dynamic Behavior Based on Service Composition