Informatics Publishing Limited

Farzaneh Sadat Jalayer ¹, Akbar Nabiollahi ¹

Affiliations
1 Najafabad Branch, Islamic Azad University, Najafabad, IR

Abstract

Information security against hacking, altering, corrupting, and divulging data is vital and inevitable and it requires an effective management in every organization. Some of the upcoming challenges can be the study of available frameworks in Enterprise Information Security Architecture (EISA) as well as criteria extraction in this field. In this study a method has been adopted in order to extract and categorize important and effective criteria in the field of information security by studying the major dimensions of EISA including standards, policies and procedures, organization infrastructure, user awareness and training, security base lines, risk assessment and compliance. Gartner's framework has been applied as a fundamental model to categorize the criteria. To assess the proposed model, a questionnaire was prepared and a group of EISA professionals completed it. The Fuzzy TOPSIS was used to quantify the data and prioritize criteria. It could be concluded that the database and database security criteria, inner software security, electronic exchange security and supervising malicious software can be high priorities.

Keywords

Enterprise Information Security Architecture (EISA), Information Security Architecture's Criteria, Categorizing Criteria, Fuzzy TOPSIS.

Full Text

   

Marzieh Eskandari ¹, Akbar Nabiollahi ¹

Affiliations
1 Islamic Azad University, Najafabad Branch, Najafabad, IR

Abstract

In the field of enterprise architecture (EA), qualitative scenarios are used to understand the qualitative characteristics better. In order to reduce the implementation cost, scenarios are prioritized to be able to focus on the higher priority and more important scenarios. There are different methods to evaluate enterprise architecture including architecture Trade-off Analysis Method (ATAM).Prioritizing qualitative scenarios is one of the main phases of this method. Since none of the recent studies meet the prioritizing qualitative scenarios requirements, considering proper prioritizing criteria and reaching an appropriate speed priority, non-dominated sorting genetic algorithms is used in this study (NSGA-II). In addition to previous research standards more criteria were considered in the proposed algorithm, these sets of structures together as gene and in the form of cell array constitute chromosome. The proposed algorithm is evaluated in two case studies in the field of enterprise architecture and architecture software. The results showed the accuracy and the more appropriate speed comparing to the previous works including genetic algorithms.

Keywords

Enterprise Architecture Evaluation, Qualitative Scenarios Prioritizing, NSGA-II Algorithm.

Full Text