January 2003
·
40 Reads
·
2 Citations
When a system is to be built from a range of security products, it can be difficult to understand how much protection they will give and their impact on the way business can be conducted. A security architecture that is defined in terms of the required controls on the exchange of business information can help provide this understanding. The Domain Based Security risk management approach will be presented. The approach is based on a security architecture that is tailored to the connection and protection needs of an organisation. The architecture is created using a clearly defined modelling language and can be subject to rigorous risk analysis to ensure that all potential compromise paths have been identified and considered.