Show simple item record

dc.creatorMora Castro, Alejandro
dc.creatorGonzález Herrera, Andrés
dc.creatorVillalón Fonseca, Ricardo
dc.description.abstractCybersecurity can be effectively managed with an architecture-based approach, composed with three viewpoints, namely system, security and process. Using models for describing a system and its security objectives enables a systemic and exhaustive risk management process. The architecture approach produces an integral set of security policies and controls that can be fully maintained during the entire system life-cycle. Furthermore, architecture models support automation and high scalability, thus providing an innovative way for constructing and maintaining the cybersecurity for very large systems or even for system of systems. This work describes details, technical aspects, and examples for the risk management process of the architecture, including the establishment of the system representation, the security goals, going through risk identification and analysis, up to the policies and control definition. Some highlighting points of the methodology follow. • System representation is simple because it focuses only on aspects relevant to security purposes. • Security objectives behave as an end-to-end guidance of the security, for the whole system and also during its life-cycle. • Risk management can be done with existing methods and standards, but additionally supported with the comprehensive capability provided by the system representation and the security objectives.es_ES
dc.rightsAttribution-NoDerivatives 4.0 Internacional*
dc.sourceMethodsX, Volume 10, 102010, 2023es_ES
dc.subjectInformation security architecturees_ES
dc.subjectCybersecurity architecturees_ES
dc.subjectInformation security methodologyes_ES
dc.subjectCybersecurity methodologyes_ES
dc.subjectRisk managementes_ES
dc.titleConstructing an architecture-based cybersecurity solution for a systemes_ES
dc.typeartículo científicoes_ES
dc.description.procedenceUCR::Vicerrectoría de Investigación::Unidades de Investigación::Ingeniería::Centro de Investigaciones en Tecnologías de Información y Comunicación (CITIC)es_ES
dc.description.procedenceUCR::Vicerrectoría de Docencia::Ingeniería::Facultad de Ingeniería::Escuela de Ciencias de la Computación e Informáticaes_ES

Files in this item


This item appears in the following Collection(s)

Show simple item record

Attribution-NoDerivatives 4.0 Internacional
Except where otherwise noted, this item's license is described as Attribution-NoDerivatives 4.0 Internacional