Framwork for information security standards storage and retrieval using security patterns

Abstract

Establishing an information security policy that aligns with the business strategy of the organization usually depends on the stakeholders' expertise and experience. Due to the human factor constraint, this may lead to an incomplete and unclear policy. This research proposes a framework for the storage and retrieval of information security standards using information retrieval principles and security patterns based on security patterns, keyword search and the relationship among security patterns. The vector space model is used to compute the similarity between user queries and parts of security standard documents to present results relevant to the users' needs. Recall, precision and F-measure are used to evaluate the efficiency of the proposed methods.