Srs-tool: a security functional requirement

918 palavras 4 páginas
Exibir mais
UNIVERSIDADE PRESBITERIANA MACKENZIE
FACULDADE DE COMPUTAÇÃO E INFORMÁTICA
SISTEMAS DE INFORMAÇÃO
Disciplina de Teoria Geral de Sistemas

2011/1

SRS-Tool: A Security Functional Requirement
Specification Development Tool for Application
Information System of Organization

Introdução:

A demanda na avaliação e certificação cresce rapidamente por conta da importância da segurança de informação. Organizações públicas ou privadas constroem e integram seus IS produtos de segurança avaliados (i. e. Smart card e Firewall) e validados por algoritmos de criptografia (i. e. OpenSSL). No entanto, vários IS tem sido desenvolvidos e operados pelo uso de produtos de segurança e módulos criptografados tanto quanto o conceito de gerência de riscos.
O ISO/IEC 17799 e ISO/IEC 13335 são as normas internacionais usadas como base da avaliação e gerência de riscos e os CMVP (programa de validação de módulo criptográfico) e CC (critério comum) são usados como base nessa validação da segurança de produtos, porém, o sistema de avaliação mais amplo é também requisitado que sejam utilizados métodos mais sofisticados, pois os fatores que ameaçam a segurança de informação tornam-se mais complexos.
Especialmente sistemas de informação (IS) de organizações públicas ou privadas podem desenvolver métodos seguros e baratos usando a engenharia de segurança e tecnologia de engenharia de software tão bem quanto a SRS que é usada nas organizações de sistemas de informação (IS).
Para resolver esses problemas, é proposto um SRS-Process que é um processo de desenvolvimento baseado em CC para obter informações produtos de segurança e proteção perfil (PP) que é uma ferramenta comum para segurança da informação. SRS –Tool é uma ferramenta de desenvolvimento para SRS específicas de IS.

SRS-Process: Um desenvolvimento de processos para SRS

Definindo-se SRS “é uma especificação de segurança de requerimento funcional security functional para sistemas de informação (IS) de organizações

Relacionados

  • Swebok 2004
    88749 palavras | 355 páginas

    CHAPTER 3 CHAPTER 4 CHAPTER 5 CHAPTER 6 CHAPTER 7 CHAPTER 8 CHAPTER 9 CHAPTER 10 CHAPTER 11 CHAPTER 12 APPENDIX A INTRODUCTION TO THE GUIDE ..................................................................................................1-1 SOFTWARE REQUIREMENTS .......................................................................................................2-1 SOFTWARE DESIGN....................................................................................................................3-1 SOFTWARE….

    exibir mais
  • Sistema monitiração
    22481 palavras | 90 páginas

    .. 36 Chapter 4: Locking Down Security and Governance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Understanding Security Risks ................................................ 40 Alleviating the risks ....................................................... 40 Combining security requirements for private and public clouds ................................... 42 Assessing private cloud security requirements ........ 42 Building a Secure Private….

    exibir mais
  • Windows server 2012 guide
    55974 palavras | 224 páginas

    multitenant infrastructure that can help you scale and secure workloads and cost-effectively build a Microsoft private cloud, Windows Server 2012 can help you provide:  A complete virtualization platform – A fully isolated, multitenant environment features tools that can help guarantee service level agreements (SLAs), enable chargebacks through usage-based billing, and support self-service delivery.  Increased scalability and performance – A high-density, highly scalable environment can be modified to perform….

    exibir mais
  • Introduzindo windows server 2012 - inglês
    75613 palavras | 303 páginas

    need for Windows Server 2012 Making the transition Cloud sourcing models Cloud service models Microsoft cloud facts 1 2 3 4 5 The rationale behind cloud computing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Technical requirements for successful cloud computing . . . . . . . . . . . . . . . . 6 Four ways Windows Server 2012 delivers value for cloud computing . . . 10 Foundation for building your private cloud Highly available, easy-to-manage multi-server platform Deploy….

    exibir mais
  • Linking ecologists and traditional farmers in the search for sustainable agriculture (miguel a altieri)
    5465 palavras | 22 páginas

    farmers in the search for sustainable agriculture Miguel A Altieri For centuries, traditional farmers have developed diverse and locally adapted agricultural systems, managing them with ingenious practices that often result in both community food security and the conservation of agrobiodiversity. This strategy of minimizing risk stabilizes yields, promotes dietary diversity, and maximizes returns using low levels of technology and limited resources. These microcosms of agricultural heritage still….

    exibir mais
  • Cisco ipv6 security
    200210 palavras | 801 páginas

    IPv6 Security Scott Hogg, CCIE No. 5133 Eric Vyncke Cisco Press Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA ii IPv6 Security Scott Hogg and Eric Vyncke Copyright© 2009 Cisco Systems, Inc. Published by: Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval….

    exibir mais
  • A república de platão
    11156 palavras | 45 páginas

    specific crops in areas where this has hitherto not been possible, thereby expanding the arable area and the potential for agricultural production (extensification). In both ways, stress-tolerant crops can be envisaged to contribute to increased food security. It is also noted that certain modifications can render crops tolerant to multiple kinds of stress, given that the adverse effects of these stressors act through common mechanisms, including increased oxidative damage to plant cells caused by ROS….

    exibir mais
  • Técnico
    38440 palavras | 154 páginas

    applications differ in terms of QoS (Quality of Service) requirements, each one inflicting constraints which are specific to this kind of environment due to its limited bandwidth. Based on this, in this paper, we propose alternative schemes of CAC (Call Admission Control) combined with adjacent cells bandwidth reservation schemes, in an end-to-end approach. This proposal try to attend various multimedia services according to their QoS requirements, also reducing the dropping probabilities during the….

    exibir mais
  • Apostila de proteção de sistema de energia elétrica
    27728 palavras | 111 páginas

    Canada Open Communications Protocols In today’s open systems the ability to share data seamlessly through company-wide networks is the key to increasing efficiency and reducing costs as well as enhancing open connectivity between a company’s related functional areas. This is especially true in the utility industry, where organizations have been grappling with a range of proprietary hardware and software products that can be neither integrated nor upgraded at a reasonable cost and/or effort. Special communications….

    exibir mais
  • Criptografia
    405566 palavras | 1623 páginas

    of the art were those associated with the military, the diplomatic service and government in general. Cryptography was used as a tool to protect national secrets and strategies. The proliferation of computers and communications systems in the 1960s brought with it a demand from the private sector for means to protect information in digital form and to provide security services. Beginning with the work of Feistel at IBM in the early 1970s and culminating in 1977 with the adoption as a U.S. Federal….

    exibir mais

Outros Trabalhos Populares