Business component identification of enterprise information system: a hierarchical clustering method

The article considers the problem of damage evaluation in case of failure of the information system. There have been analyzed the practical methods of assessing damage. It has been stated that the methods can reveal the dependence of the damage on the downtime of the information system, but they are unable to evaluate reputation, administrative or any other consequences. An algorithm is proposed by which specialists can conduct a comparative assessment of damage in case of failure of various information systems using expert information. Applying the proposed algorithm to different information systems, it is possible to determine the most critical systems and, on this basis, effectively plan operational impacts to increase the level of service availability.

Download Full-text

Business Component Identification Method Based on Semantic Similarity and the Cluster Algorithm

Proceedings of the 2018 International Conference on Energy Development and Environmental Protection (EDEP 2018) ◽

10.2991/edep-18.2018.66 ◽

2018 ◽

Author(s):

Li-Yan CHEN ◽

Long TAN ◽

Jun LU

Keyword(s):

Semantic Similarity ◽

Cluster Algorithm ◽

Identification Method ◽

Component Identification ◽

Business Component ◽

Business Component Identification

Download Full-text

SELECTING SAFETY PACKAGE COMPONENTS OF ENTERPRISE INFORMATION SYSTEM FOLLOWING REQUIREMENTS OF STANDARD LEGAL DOCUMENTS

Vestnik of Don State Technical University ◽

10.23947/1992-5980-2018-18-3-333-338 ◽

2018 ◽

Vol 18 (3) ◽

pp. 333-338

Author(s):

E. A. Vitenburg ◽

A. A. Levtsova

Keyword(s):

Information System ◽

Information Security ◽

International Standards ◽

Protection System ◽

Enterprise Information System ◽

Enterprise Information ◽

Research Results ◽

Legal Documents ◽

The Russian Federation ◽

Selection Of

Introduction. Production processes quality depends largely on the management infrastructure, in particular, on the information system (IS) effectiveness. Company management pays increasingly greater attention to the safety protection of this sphere. Financial, material and other resources are regularly channeled to its support. In the presented paper, some issues on the development of a safety enterprise information system are considered.Materials and Methods. Protection of the enterprise IS considers some specific aspects of the object, and immediate threats to IT security. Within the framework of this study, it is accepted that IS are a complex of data resources. A special analysis is resulted in determining categories of threats to the enterprise information security: hacking; leakage; distortion; loss; blocking; abuse. The connection of these threats, IS components and elements of the protection system is identified. The requirements of normative legal acts of the Russian Federation and international standards regulating this sphere are considered. It is shown how the analysis results enable to validate the selection of the elements of the IS protection system.Research Results. A comparative analysis of the regulatory literature pertinent to this issue highlights the following. Different documents offer a different set of elements (subsystems) of the enterprise IS protection system. To develop an IS protection program, you should be guided by the FSTEC Order No. 239 and 800-82 Revision 2 Guide to ICS Security.Discussion and Conclusions. The presented research results are the basis for the formation of the software package of intellectual support for decision-making under designing an enterprise information security system. In particular, it is possible to develop flexible systems that allow expanding the composition of the components (subsystems).

Download Full-text