首页> 外文会议>Network and Service Security, 2009. N2S '09 >SecMaLET: a tool for establishing the chain of trust within a Virtual Enterprise
【24h】

SecMaLET: a tool for establishing the chain of trust within a Virtual Enterprise

机译:SecMaLET:在虚拟企业中建立信任链的工具

获取原文

摘要

The virtual enterprise (VE) concept has emerged in the beginning of 1990s from the need for cooperation faced by traditional enterprises, searching for partnership skills, in order to respond to new business opportunities. Within a VE, traditional enterprises must interconnect their information systems (IS) through information technologies (IT). Opening a part (or all) of its IS to partners presents security challenges on technical and organizational levels. Each member of a VE needs guaranties from its partners; this level of guaranty will guide the choice of architectural solutions to deploy within the distributed environment. Within this paper, we detail security issues and, especially access control issues, facing enterprises when deciding to deploy a VE. We present our work that deals with ensuring access control functionalities for VE: we detail and present the new version of our tool "SecMaLET: security maturity level evaluation tool" we have defined for providing enterprises with the mean to evaluate the level of maturity of their partners in terms of security issues. This level of maturity is, in some way, a guaranty that these partners will act accordingly to what has been decided during the VE deployment and that the shared resources will not be exposed to attacks due to security breaches within the partners IS.
机译:虚拟企业(VE)的概念已在1990年代初出现,这是传统企业所面临的合作需求,即寻求伙伴关系技能以应对新的商机。在企业内部,传统企业必须通过信息技术(IT)互连其信息系统(IS)。向合作伙伴开放部分(或全部)IS会给技术和组织层面带来安全挑战。 VE的每个成员都需要其合作伙伴的保证;此级别的担保将指导选择要在分布式环境中部署的体系结构解决方案。在本文中,我们详细介绍了企业在决定部署VE时面临的安全问题,尤其是访问控制问题。我们介绍了有关确保VE的访问控制功能的工作:我们详细介绍了我们定义的新版本的工具“ SecMaLET:安全成熟度评估工具”,旨在为企业提供评估其成熟度的方法。合作伙伴在安全性方面。在某种程度上,这种成熟度可以保证这些合作伙伴将根据VE部署期间做出的决定采取相应的行动,并且由于合作伙伴IS内的安全漏洞,共享资源将不会受到攻击。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号