Spring 2010 Management Symposium

• HOME
• OVERVIEW
• DATES
• SCHEDULE
• CONTRIBUTORS
• COMMITTEE
• HOTEL
• VICTORIA
• TRAVEL

Innovation: Options, Implementations, and
Technical Solutions

 

 

View full Program Schedule

Session: Innovation: Options, Implementations, and Technical Solutions

Speakers:
Vijay Anand, Illinois Institute of Technology
Jafar Saniie, Illinois Institute of Technology
Erdal Oruklu, Illinois Institute of Technology

Title: Security Policy Management Process within Six Sigma Framework

A measure of trust in a computing service is quantified by the security guarantees of the security goals of the service. These security guarantees, based on known and modeled threats, shape the security policies for a computing service. As threats evolve, the need for adaptive security policies for services in the computing system is necessary to counteract against the threats in real-time. Security policy management process needs to account for the diversity of hardware and software as computing systems are a blend of hardware and software resources harnessed via the computing services. Therefore, this paper presents a management process for creating adaptive real-time security policies modeled on evolving threats on the services which are provided by a secure computing system. A key challenge for the creation of a new management process is integrating this process to known industrial process models. One such industrial process model is Six-Sigma which is a business process management model for creating efficient systems wherein customer centric needs within the perspective of business data are widely adopted by both software and hardware companies. Therefore, the security policy management process presented in this paper is based on the Six Sigma model. The Six-Sigma framework i) Defines and quantifies security goals of digital assets ii) Measures and assesses threats and quantifies risk for those assets iii) Analyzes overall security goals keeping in context of the diversity of external and internal factors affecting the management of the computing service iv) Improves the system with optimization of security policies with evolving threats, and v) Controls the security policy implementation to guarantee the quality service for gaining customer trust.