Measurement of information security in processes and products

Reijo Savola; Juhani Anttila; Anni Sademies; Jorma Kajava; Jarkko Holappa

doi:10.1007/0-387-31167-X_16

Measurement of information security in processes and products

Reijo Savola, Juhani Anttila, Anni Sademies, Jorma Kajava, Jarkko Holappa

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

1 Citation (Scopus)

Abstract

In order to better understand the information security performance in products, processes, technical systems or organizations as a whole, and to plan, control, and improve it, security engineers, system developers and business managers must be able to get early feedback information from the achieved security situation. Systematic security metrics provides the means for managing security-related measurements comprehensively. We reflect on the use of information security metrics by presenting the results of an interview study carried out in Finnish industrial companies and State institutions. Furthermore, we discuss the application of security measurements from the business process and technical points of view. The role of technical security metrics is analyzed using mobile ad hoc networks as a case example.

Original language	English
Title of host publication	Security Management, Integrity, and Internal Control in Information Systems
Editors	Paul Dowland, Steve Furnell, Bhavani Thuraisingham, X. Sean Wang
Publisher	Springer
Pages	249-265
ISBN (Electronic)	978-0-387-31167-8
ISBN (Print)	0-387-29826-6, 978-0-387-29826-9
DOIs	https://doi.org/10.1007/0-387-31167-X_16
Publication status	Published - 2005
MoE publication type	A4 Article in a conference publication
Event	IFIP TC-11 WG 11.1 and WG 11.5 Joint Working Conference on Security Management, Integrity and Internal Control in Information Systems - Fairfax, United States Duration: 1 Dec 2005 → 2 Dec 2005

Publication series

Series	IFIP International Federation for Information Processing
Volume	193
ISSN	1571-5736

Conference

Conference	IFIP TC-11 WG 11.1 and WG 11.5 Joint Working Conference on Security Management, Integrity and Internal Control in Information Systems
Country/Territory	United States
City	Fairfax
Period	1/12/05 → 2/12/05

Keywords

information security

Access to Document

10.1007/0-387-31167-X_16

Cite this

Savola, Reijo ; Anttila, Juhani ; Sademies, Anni et al. / Measurement of information security in processes and products. Security Management, Integrity, and Internal Control in Information Systems. editor / Paul Dowland ; Steve Furnell ; Bhavani Thuraisingham ; X. Sean Wang. Springer, 2005. pp. 249-265 (IFIP International Federation for Information Processing, Vol. 193).

@inproceedings{188aa410ed674dfcb7cc5540d7174514,

title = "Measurement of information security in processes and products",

abstract = "In order to better understand the information security performance in products, processes, technical systems or organizations as a whole, and to plan, control, and improve it, security engineers, system developers and business managers must be able to get early feedback information from the achieved security situation. Systematic security metrics provides the means for managing security-related measurements comprehensively. We reflect on the use of information security metrics by presenting the results of an interview study carried out in Finnish industrial companies and State institutions. Furthermore, we discuss the application of security measurements from the business process and technical points of view. The role of technical security metrics is analyzed using mobile ad hoc networks as a case example.",

keywords = "information security",

author = "Reijo Savola and Juhani Anttila and Anni Sademies and Jorma Kajava and Jarkko Holappa",

year = "2005",

doi = "10.1007/0-387-31167-X_16",

language = "English",

isbn = "0-387-29826-6",

series = "IFIP International Federation for Information Processing",

publisher = "Springer",

pages = "249--265",

editor = "Paul Dowland and Steve Furnell and Bhavani Thuraisingham and Wang, {X. Sean}",

booktitle = "Security Management, Integrity, and Internal Control in Information Systems",

address = "Germany",

note = "IFIP TC-11 WG 11.1 and WG 11.5 Joint Working Conference on Security Management, Integrity and Internal Control in Information Systems ; Conference date: 01-12-2005 Through 02-12-2005",

}

Savola, R, Anttila, J, Sademies, A, Kajava, J & Holappa, J 2005, Measurement of information security in processes and products. in P Dowland, S Furnell, B Thuraisingham & XS Wang (eds), Security Management, Integrity, and Internal Control in Information Systems. Springer, IFIP International Federation for Information Processing, vol. 193, pp. 249-265, IFIP TC-11 WG 11.1 and WG 11.5 Joint Working Conference on Security Management, Integrity and Internal Control in Information Systems, Fairfax, United States, 1/12/05. https://doi.org/10.1007/0-387-31167-X_16

Measurement of information security in processes and products. / Savola, Reijo; Anttila, Juhani; Sademies, Anni et al.
Security Management, Integrity, and Internal Control in Information Systems. ed. / Paul Dowland; Steve Furnell; Bhavani Thuraisingham; X. Sean Wang. Springer, 2005. p. 249-265 (IFIP International Federation for Information Processing, Vol. 193).

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Measurement of information security in processes and products

AU - Savola, Reijo

AU - Anttila, Juhani

AU - Sademies, Anni

AU - Kajava, Jorma

AU - Holappa, Jarkko

PY - 2005

Y1 - 2005

N2 - In order to better understand the information security performance in products, processes, technical systems or organizations as a whole, and to plan, control, and improve it, security engineers, system developers and business managers must be able to get early feedback information from the achieved security situation. Systematic security metrics provides the means for managing security-related measurements comprehensively. We reflect on the use of information security metrics by presenting the results of an interview study carried out in Finnish industrial companies and State institutions. Furthermore, we discuss the application of security measurements from the business process and technical points of view. The role of technical security metrics is analyzed using mobile ad hoc networks as a case example.

AB - In order to better understand the information security performance in products, processes, technical systems or organizations as a whole, and to plan, control, and improve it, security engineers, system developers and business managers must be able to get early feedback information from the achieved security situation. Systematic security metrics provides the means for managing security-related measurements comprehensively. We reflect on the use of information security metrics by presenting the results of an interview study carried out in Finnish industrial companies and State institutions. Furthermore, we discuss the application of security measurements from the business process and technical points of view. The role of technical security metrics is analyzed using mobile ad hoc networks as a case example.

KW - information security

U2 - 10.1007/0-387-31167-X_16

DO - 10.1007/0-387-31167-X_16

M3 - Conference article in proceedings

SN - 0-387-29826-6

SN - 978-0-387-29826-9

T3 - IFIP International Federation for Information Processing

SP - 249

EP - 265

BT - Security Management, Integrity, and Internal Control in Information Systems

A2 - Dowland, Paul

A2 - Furnell, Steve

A2 - Thuraisingham, Bhavani

A2 - Wang, X. Sean

PB - Springer

T2 - IFIP TC-11 WG 11.1 and WG 11.5 Joint Working Conference on Security Management, Integrity and Internal Control in Information Systems

Y2 - 1 December 2005 through 2 December 2005

ER -

Savola R, Anttila J, Sademies A, Kajava J, Holappa J. Measurement of information security in processes and products. In Dowland P, Furnell S, Thuraisingham B, Wang XS, editors, Security Management, Integrity, and Internal Control in Information Systems. Springer. 2005. p. 249-265. (IFIP International Federation for Information Processing, Vol. 193). doi: 10.1007/0-387-31167-X_16

Measurement of information security in processes and products

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this