Διαχείριση κρίσιμων πληροφοριακών υποδομών με τη χρήση μεθόδων ποσοτικοποίησης της ασφάλειας

Doctoral Thesis
Author
Σερρέλης, Εμμανουήλ Δ.
Date
2011-07-15View/ Open
Subject
Ανάλυση και σχεδίαση συστημάτων ; Πληροφοριακά συστήματα -- Διοίκηση και οργάνωση ; Πληροφοριακά συστήματα -- Μέτρα ασφαλείαςAbstract
This doctoral thesis deals with the development and application of management methods in critical information infrastructures. These methods are evaluated for the level of security they offer. During the evaluation of the various approaches of measurement and quantification of security, it is concluded that security is a notion that is difficult to be measured objectively. To this direction, the measurement, quantification and calculation of security of information systems using objective criteria is set as a secondary objective. Two solutions to measure, quantify and calculate information security, based in unique for each case objective criteria, are proposed. From the examination and evaluation of the methods of calculation of security several methods to increase security are described. Additionally, two methodologies are also developed, which is the main target of the thesis. These methodologies deal with the management and transformation of critical information infrastructures in order to optimise their function and increase the availability of services and data supported.