2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management最新文献_第2页

Elevating the Discussion on Security Management: The Data Centric Paradigm 提升安全管理的讨论:以数据为中心的范式

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375015

Tyrone Grandison, Michael Bilger, Luke O’Connor, M. Graf, Morton Swimmer, M. Schunter, A. Wespi, Nevenko Zunic

{"title":"Elevating the Discussion on Security Management: The Data Centric Paradigm","authors":"Tyrone Grandison, Michael Bilger, Luke O’Connor, M. Graf, Morton Swimmer, M. Schunter, A. Wespi, Nevenko Zunic","doi":"10.1109/BDIM.2007.375015","DOIUrl":"https://doi.org/10.1109/BDIM.2007.375015","url":null,"abstract":"Corporate decision makers have normally been disconnected from the details of the security management infrastructures of their organizations. The management of security resources has traditionally been the domain of a small group of skilled and technically savvy professionals, who report to the executive team. As threats become more prevalent, attackers get smarter and the infrastructure required to secure corporate assets become more complex, the communication gap between the decision makers and the implementers has widened. The risk of misinterpretation of corporate strategy into technical safe controls also increases with the above-mentioned trends. In this paper, we articulate a paradigm for managing enterprise security called the data centric security model (DCSM), which puts IT policy making in the hands of the corporate executives, so that security decisions can be directly executed without the diluting effect of interpretation at different levels of the Infrastructure and with the benefit of seeing direct correlation between business objective and security mechanism. Our articulation of the DCSM vision is a starting point for discussion and provides a rich platform for research into business-driven security management.","PeriodicalId":414047,"journal":{"name":"2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management","volume":"661 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131984949","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 31

Utilizing a Service Oriented Architecture for Information Security Evaluation and Quantification 利用面向服务的体系结构进行信息安全评估与量化

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375023

C. Martin, Khalil A. Abuosba

引用次数: 4

A Mechanism of Specifying and Determining Pricing in Utility Computing Environments 效用计算环境下定价的确定机制

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375010

J. Ouyang, Akhil Sahai, J. Pruyne

引用次数: 8

The strategic value of the "fit" between business processes and IT management: The case of the Italian publishing industry 业务流程和IT管理之间“契合”的战略价值:以意大利出版业为例

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375021

G. Petruzzi, A. Garavelli

{"title":"The strategic value of the \"fit\" between business processes and IT management: The case of the Italian publishing industry","authors":"G. Petruzzi, A. Garavelli","doi":"10.1109/BDIM.2007.375021","DOIUrl":"https://doi.org/10.1109/BDIM.2007.375021","url":null,"abstract":"This research study aims at investigating the effect of the fit between organizational processes and information technology on business performance. Our key theoretical point unfolds from the hypothesis that the information technologies can trigger their potential and (positively) impact business performance if they \"fit\" the organizational processes they are deemed to support. When firms configure their IT equipments, we argue that managers should select a configuration that better \"fit\" the processes. We have outlined a theoretically derived model of IT/process fit based on business process dimensions and their relationship to IT features that can help researchers to understand the consequences of IT investments on organization. Model estimation has been carried out in the context of the Italian publishing industry on a sample of 36 publishing firms. The results show substantial support for our main hypothesis: firms which actually use IT in a way that fits business process requirements show a better competitive positioning. Results have significant managerial implications and show that to make \"good\" IT decisions managers should consider jointly both IT characteristics and process dimensions. The cost of any IT option should be evaluated against its purpose and the organizational processes the IT should support.","PeriodicalId":414047,"journal":{"name":"2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131081099","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

A Model Driven Framework for IT Transformation IT转换的模型驱动框架

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375012

S. Kumaran, T. Chao, K. Bhattacharya, P. Dhoolia

引用次数: 2

Definition of Metric Dependencies for Monitoring the Impact of Quality of Services on Quality of Processes 用于监控服务质量对过程质量影响的度量依赖关系的定义

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375006

Christian Mayerl, Kay M. Huner, Jens-Uwe Gaspar, Christof Momm, S. Abeck

{"title":"Definition of Metric Dependencies for Monitoring the Impact of Quality of Services on Quality of Processes","authors":"Christian Mayerl, Kay M. Huner, Jens-Uwe Gaspar, Christof Momm, S. Abeck","doi":"10.1109/BDIM.2007.375006","DOIUrl":"https://doi.org/10.1109/BDIM.2007.375006","url":null,"abstract":"Service providers have to monitor the quality of offered services and to ensure the compliance of service levels provider and requester agreed on. Thereby, a service provider should notify a service requester about violations of service level agreements (SLAs). Furthermore, the provider should point to impacts on affected processes in which services are invoked. For that purpose, a model is needed to define dependencies between quality of processes and quality of invoked services. In order to measure quality of services and to estimate impacts on the quality of processes, we focus on measurable metrics related to functional elements of processes, services as well as components implementing services. Based on functional dependencies between processes and services of a service-oriented architecture (SOA), we define metric dependencies for monitoring the impact of quality of invoked services on quality of affected processes. In this paper we discuss how to derive metric dependency definitions from functional dependencies by applying dependency patterns, and how to map metric and metric dependency definitions to an appropriate monitoring architecture.","PeriodicalId":414047,"journal":{"name":"2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126427002","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 20

Specifying Information Security Needs for the Delivery of High Quality Security Services 订明资讯保安需要，以提供高质素的保安服务

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-05-21 DOI: 10.1109/BDIM.2007.375022

Xiaomeng Su, D. Bolzoni, P. V. Eck

引用次数: 2

Model-Based Mitigation of Availability Risks 基于模型的可用性风险缓解

2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management Pub Date : 2007-01-31 DOI: 10.1109/BDIM.2007.375014

E. Zambon, D. Bolzoni, S. Etalle, M. Salvato

{"title":"Model-Based Mitigation of Availability Risks","authors":"E. Zambon, D. Bolzoni, S. Etalle, M. Salvato","doi":"10.1109/BDIM.2007.375014","DOIUrl":"https://doi.org/10.1109/BDIM.2007.375014","url":null,"abstract":"The assessment and mitigation of risks related to the availability of the IT infrastructure is becoming increasingly important in modern organizations. Unfortunately, present standards for risk assessment and mitigation show limitations when evaluating and mitigating availability risks. This is due to the fact that they do not fully consider the dependencies between the constituents of an IT infrastructure that are paramount in large enterprises. These dependencies make the technical problem of assessing availability issues very challenging. In this paper we define a method and a tool for carrying out a risk mitigation activity which allows us to assess the global impact of a set of risks and to choose the best set of countermeasures to cope with them. To this end, the presence of a tool is necessary, due to the high complexity of the assessment problem. Our approach can be integrated in present risk management methodologies (e.g. COBIT) to provide a more precise risk mitigation activity. We substantiate the viability of this approach by showing that most of the input required by the tool is available as part of a standard business continuity plan, and/or by performing a common tool-assisted risk management.","PeriodicalId":414047,"journal":{"name":"2007 2nd IEEE/IFIP International Workshop on Business-Driven IT Management","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-01-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115392278","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18