Earticle

초록

영어

Small and medium enterprises (SMEs) is leaning more on their information technology (IT) infrastructure but they lack the means to secure it appropriately due to financial restrictions, limited resources, and adequate know-how. Many SME managers believe that IT security in their company is basically equivalent to having a firewall and updating the antivirus software regularly. Strategic policies, information theft, business continuity, access controls, and many other aspects are only dealt with in case of security incidents. To improve security in a company holistically, four levels (organizational level, workflow level, information level, and technical level) need to be addressed. Parts of existing standards are useful to address issues on the organizational level; Pipkin’s approach is especially useful for SMEs. Modeling of business processes and taking security/dependability into account can improve reliability and robustness of the workflow level. On the information level, role-based access control is state-of the art.

목차

Abstract
 1. Introduction
 2. SME's and Large Companies
 3. Organization
  3.1 IT Security Standards for SMEs
  3.2 Stakeholders
 4. Workflow
  4.1 Security and Dependability of Workflows
  4.2 Security and Dependability of Workflows
 5. Information Level
 6. Securing Infrastructure
 7. Conclusion
 References

키워드

저자

• Ji-Yeu Park [ School of Multimedia, Hannam University, Daejeon, Korea ]
• Rosslin John Robles [ School of Multimedia, Hannam University, Daejeon, Korea ]
• Chang-Hwa Hong [ School of Multimedia, Hannam University, Daejeon, Korea ]
• Sang-Soo Yeo [ BTWorks Inc, Seoul, Korea ]
• Tai-hoon Kim [ School of Multimedia, Hannam University, Daejeon, Korea ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Software Engineering and Its Applications

• 간기

  월간

• pISSN

  1738-9984

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605