engleski

Towards Overall Information Security and Privacy (IS&P) Taxonomy

Although the importance of information security in every day's business and private life is obvious, there is a constant increase in number of security breaches. A wide array of all kinds of issues have either direct or indirect impact on the overall information security and privacy level. The aim of this work is to collect and describe these issues in a standard manner. For this purpose, a taxonomy modeling was used, since it is a commonly used technique for classification. Building taxonomy scheme means classifying elements on some subject with parent-child relations between entities. After defining main parent node as the Overall Information Security and Privacy, its main child nodes are defined to represent main subareas in the scheme: Network Protection, Software Protection, Physical Protection, Security Procedures, Web Site, System's Paper Elements, Security Legislations and Users' Influence. Each subarea is further divided into smaller information security and privacy subareas, and further into even smaller subareas, until it was no longer possible to divide. This taxonomy can be used as a basis for security ontology and various analytical and decision support systems used for security evaluation and risk assessment.

Taxonomy , Information security , Privacy , Ontologies

nije evidentirano