onr:"swepub:oai:DiVA.org:su-114736"
Search: onr:"swepub:oai:DiVA.org:su-114736" > Security from a Sys...
- 1 of 1
- Previous record
- Next record
- To hitlist
Security from a Systems Thinking Perspective - Applying Soft Systems Methodology to the Analysis of an Information Security Incident
-
- Al Sabbagh, Bilal (author)
- Stockholms universitet,Institutionen för data- och systemvetenskap
-
- Kowalski, Stewart (author)
- Stockholms universitet,Institutionen för data- och systemvetenskap
- (creator_code:org_t)
- International Society for the Systems Sciences (ISSS), 2014
- 2014
- English.
- In: Proceedings of the 58th Meeting of ISSS, Washington DC, USA, July 2014. - : International Society for the Systems Sciences (ISSS). - 9781510803718
- Conference paper (peer-reviewed)
Abstract
Subject headings
Close
- Applying systems theory to information security enables security analysts to consider the socio-technical role of the security system instead of only focusing on the technical part. Systems theory can also equip security analysts with the skills required to have a holistic and an abstract level of understanding of the security problem in their organisations and to proactively define and evaluate existing risks. The Soft Systems Methodology (SSM) developed by Peter Checkland was created in order to deal with unstructured situations where human beings are part of the socio-technical system. In this paper, SSM is applied as a framework to diagnose a real case security incident in an organisation. The purpose of this application is to demonstrate how the methodology can be considered a beneficial tool for security analysts during security incident management and risk analysis. Literature review and experience indicate an existing lack of customisable incident response tools that facilitate communication and elaboration within organizations during incident management. In addition to the fact that these tools are mainly technical and don’t take the human factor into consideration. Using SSM as such, we define the security attack as a human activity transformation system that transforms a security event triggered by an attacker into a security breach that cause damage to the victim organisation. The attack system is then modelled to include a number of dependent activity sub-systems that interact with each other and their environment including the security control activity systems. By having such systemic perception of a security attack, security analysts, we suggest, can have a holistic perception under what conditions a security attack has succeeded and what elements of the socio-technical system and its environment should have been considered in order to mitigate and reduce the risk exposure.
Subject headings
- NATURVETENSKAP -- Data- och informationsvetenskap -- Systemvetenskap, informationssystem och informatik (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Information Systems (hsv//eng)
Keyword
- SSM
- Socio-Technical Approach
- Information Security
- Security Approach
- Security Incident
- Computer and Systems Sciences
- data- och systemvetenskap
Publication and Content Type
- ref (subject category)
- kon (subject category)
Find in a library
- Proceedings of the 58th Meeting of ISSS, Washington DC, USA, July 2014 (Search for host publication in LIBRIS)
To the university's database
- 1 of 1
- Previous record
- Next record
- To hitlist
Find more in SwePub
- By the author/editor
- Al Sabbagh, Bila ...
- Kowalski, Stewar ...
- About the subject
-
- NATURAL SCIENCES
- NATURAL SCIENCES
- and Computer and Inf ...
- and Information Syst ...
- Articles in the publication
- Proceedings of t ...
- By the university
- Stockholm University
Search outside SwePub
- Extend your search to:
- Google Book Search
- Google Scholar
Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.
- Copyright © LIBRIS - National Library Systems
- LIBRIS.kb.se
