Risk Management in Service-Oriented Information Systems

Mon, 16 Sep 2013 00:00:00 +0000

Poster presentation

The interconnection of information systems is a reality, in particular with the development of service-oriented architectures (SOA) as they allow the creation of new services by composing (orchestration, choreography) existing services on the Internet. These services may have very diverse functionalities: computation, data storage, consulting remote information (catalogues, timetables). Web services (WS) are one of the most used technologies currently for such architectures.

After detailing the different technologies implemented in securing these web services, we propose an innovative approach implementing a risk management related to the use of these services. This approach relies on the ISO/IEC 27005:2011 standard which we intend to extend to services.

The design of infrastructures relying on external services is not without raising problems regarding information systems security (ISS). This concerns not only the classic criteria of confidentiality, integrity and availability, but also notions such as traceability or trust, with controllability of information as a corollary.

Information Security Risk Management in a World of Services

Sun, 08 Sep 2013 00:00:00 +0000

Alban Gabillon | Vincent Lalanne's homepage

Risk Management in Service-Oriented Information Systems

Poster presentation

Information Security Risk Management in a World of Services