Resumen

MONTESINO PERURENA, Raydel; BALUJA GARCIA, Walter  y  PORVEN RUBIER, Joelsy. Automated and integrated management of information security controls. EAC [online]. 2013, vol.34, n.1, pp. 40-58. ISSN 1815-5928.

In this paper we propose a SIEM-based model for the automated and integrated management of information security controls, in order to increase the effectiveness and reduce the complexity of information security management. The concept of automation is defined in this context and automatable controls are identified through this research. The model includes a group of security metrics for the measurement of security controls effectiveness in an automatic way. Furthermore we propose a guide for the implementation of the model and we describe a possible application scenario using OSSIM, a free software SIEM system.

Palabras clave : information security management; automation; SIEM; metrics.

        · resumen en Español     · texto en Español     · Español ( pdf )