DMCA
On the inability of existing security models to cope with data mobility in dynamic organizations (2008)
| Venue: | In Modeling Security Workshop |
| Citations: | 5 - 2 self |
BibTeX
@INPROCEEDINGS{Dimkov08onthe,
author = {Trajce Dimkov and Qiang Tang and Pieter Hartel},
title = {On the inability of existing security models to cope with data mobility in dynamic organizations},
booktitle = {In Modeling Security Workshop},
year = {2008}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
In dynamic organizations, the mobility of data outside the organiza-tional perimeter causes an increased level of threats such as the loss of confidential data and the loss of reputation. Some modeling tools, like Microsoft’s TAM, play an important role in identifying threats in tradi-tional IT systems. In these IT systems the physical infrastructure and roles are assumed to be static. We show that current modeling tools are not powerful enough to help the designer identify the emerging threats due to mobility of data and change of roles, because they do not include the mobility of IT systems nor the organizational dynamics in the security model. Researchers have proposed new security models that particularly focus on data mobility and the dynamics of modern organizations, such as frequent role changes of a person. We show that none of the new secu-rity models simultaneously considers the data mobility and organizational dynamics to a satisfactory extent. As a result, none of the new security models effectively identifies the potential security threats caused by data mobility in a dynamic organization. 1
Keyphrases
data mobility dynamic organization security model new security model organizational dynamic important role new secu-rity model microsoft tam modeling tool organiza-tional perimeter modern organization increased level tradi-tional system frequent role change current modeling tool physical infrastructure potential security threat confidential data satisfactory extent
