An automated tool for information security management system

Download

index.pdf

Date

2006

Author

Erkan, Ahmet

Metadata

Show full item record

Item Usage Stats

278
views

86
downloads

This thesis focuses on automation of processes of Information Security Management System. In accordance with two International Standards, ISO/IEC 27001:2005 and ISO/IEC 17799:2005, to automate the activities required for a documented ISMS as much as possible helps organizations. Some of the well known tools in this scope are analyzed and a comparative study on them including “InfoSec Toolkit”, which is developed for this purpose in the thesis scope, is given. “InfoSec Toolkit” is based on ISO/IEC 27001:2005 and ISO 17799:2005. Five basic integrated modules constituting the “InfoSec Toolkit” are “Gap Analysis Module”, “Risk Module”, “Policy Management Module”, “Monitoring Module” and “Query and Reporting Module”. In addition a research framework is proposed in order to assess the public and private organizations’ information security situation in Turkey.

Subject Keywords

Electronic Computers., Computer Science.

URI

http://etd.lib.metu.edu.tr/upload/12607783/index.pdf
https://hdl.handle.net/11511/16025

Collections

Graduate School of Informatics, Thesis

Suggestions

OpenMETU
Core

Face detection in active robot vision Önder, Murat; Halıcı, Uğur; Department of Electrical and Electronics Engineering (2004) The main task in this thesis is to design a robot vision system with face detection and tracking capability. Hence there are two main works in the thesis: Firstly, the detection of the face on an image that is taken from the camera on the robot must be achieved. Hence this is a serious real time image processing task and time constraints are very important because of this reason. A processing rate of 1 frame/second is tried to be achieved and hence a fast face detection algorithm had to be used. The Eigenfa...
Robot planing based on learned affordances Çakmak, Maya; Şahin, Erol; Department of Computer Engineering (2007) This thesis studies how an autonomous robot can learn affordances from its interactions with the environment and use these affordances in planning. It is based on a new formalization of the concept which proposes that affordances are relations that pertain to the interactions of an agent with its environment. The robot interacts with environments containing different objects by executing its atomic actions and learns the different effects it can create, as well as the invariants of the environments that aff...
A compact cryptographic processor for IPSec applications Kavun, Elif Bilge; Akyıldız, Ersan; Yalçın, Tolga; Department of Cryptography (2010) A compact cryptographic processor with custom integrated cryptographic coprocessors is designed and implemented. The processor is mainly aimed for IPSec applications, which require intense processing power for cryptographic operations. In the present design, this processing power is achieved via the custom cryptographic coprocessors. These are an AES engine, a SHA-1 engine and a Montgomery modular multiplier, which are connected to the main processor core through a generic flexible interface. The processor ...
A measurement framework for component oriented software systems Salman, Nael; Doğru, Ali Hikmet; Department of Computer Engineering (2006) A measurement framework is presented for component oriented (CO) software systems. Fundamental concepts in component orientation are defined. The factors that influence CO systems’ structural complexity are identified. Metrics quantifying and characterizing these factors are defined. A set of properties that a CO complexity metric must satisfy are defined. Metrics are evaluated first using the set of properties defined in this thesis and also using the set of properties defined by Tian and Zelkowitz in [84]...
An assessment and analysis tool for statistical process control of software process Kırbaş, Serkan; Doğru, Ali Hikmet; Department of Computer Engineering (2007) Statistical process control (SPC) which includes very powerful techniques used in other mature engineering disciplines for providing process control is not used by many software organizations. In software engineering domain, SPC is currently utilized only by organizations which have high maturity levels according to the process improvement models like CMM, ISO/IEC 15504 and CMMI. Guidelines and software tools to implement SPC techniques should be developed for effective use and dissemination of SPC especial...

Citation Formats

A. Erkan, “An automated tool for information security management system,” M.S. - Master of Science, Middle East Technical University, 2006.