Abstract

MONTESINO PERURENA, Raydel; BALUJA GARCIA, Walter  and  PORVEN RUBIER, Joelsy. Automated and integrated management of information security controls. EAC [online]. 2013, vol.34, n.1, pp. 40-58. ISSN 1815-5928.

In this paper we propose a SIEM-based model for the automated and integrated management of information security controls, in order to increase the effectiveness and reduce the complexity of information security management. The concept of automation is defined in this context and automatable controls are identified through this research. The model includes a group of security metrics for the measurement of security controls effectiveness in an automatic way. Furthermore we propose a guide for the implementation of the model and we describe a possible application scenario using OSSIM, a free software SIEM system.

Keywords : information security management; automation; SIEM; metrics.

        · abstract in Spanish     · text in Spanish     · Spanish ( pdf )