Grupo Alarcos · Conference paper · 2011
Automated Security Metrics in ISMSs to Discover the Level of Security of OSs and DBMSs
Ángel Gallego Santos-Olmo, Antonio Santos-Olmo Parra, Luis Enrique Sánchez Crespo, Eduardo Fernández-Medina Patón
The information society is ever-increasingly dependent upon Information Security Management Systems (ISMSs), and the availability of these systems has come to be vital to the evolution of SMEs. However, this type of companies requires ISMSs which have been adapted to their particular characteristics, and which are optimised from the point of view of the resources that are necessary to install and maintain them. This paper concentrates on the development of a process for ISMSs that will allow the level of security of critical applications installed in these sytems, i.e., Operative Systems and Data Base Management Systems, to be measured. This process is currently being directly applied in real cases, thus leading to an improvement in its application.