Author:
Namho Yoo
Affiliation:
The George Washington University, United States
Keyword(s):
XML, Configuration Management, Vulnerability, Information Assurance, System Engineering, Resource-Aware Management
Related
Ontology
Subjects/Areas/Topics:
Enterprise Information Systems
;
Formal Methods
;
Information Systems Analysis and Specification
;
Methodologies and Technologies
;
Methodologies, Processes and Platforms
;
Model-Driven Software Development
;
Operational Research
;
Requirements Analysis And Management
;
Security
;
Simulation and Modeling
;
Software Engineering
;
Systems Engineering
Abstract:
This paper suggests an XML-based configuration management for mitigating information assurance vulnerability. Once an information assurance vulnerability notice is given for a system, it is important for reducing massive system engineering efforts for configuration management. When multiple systems are updated by security patches for mitigating system vulnerability, configuration management based on system resource is trivial, in order to increase accuracy, efficiency and effectiveness of software processes. By employing XML technology, we can achieve seamless and efficient configuration management between heterogeneous system format as well as data formats in analysing and exchanging the pertinent information for information assurance vulnerability. Thus, when a system is updated to improve system vulnerability, the proposed XML-based configuration management mechanism refers to the system resource information and analyse the security model and posture of affected sustained system a
nd minimize the propagated negative impact. Then, an executable architecture for implementation to verify the proposed scheme and algorithm and testing environment is presented to mitigate vulnerable systems for sustained system.
(More)