engleski

Supporting decision making in IT security – An information-driven approach

As threats for information systems (IS) from information environments (i.e. Internet) become more frequent additional investment in providing security of IS is required. In order to make adequate decision on appropriate commercial solution for protection of the core IS, management executives should first decide on the minimum criteria for evaluation. In this paper we propose an information-driven approach to determining the relevancy of different features of commercial solutions that suppliers of Internet security make available to managers. These are the criteria that should be evaluated in order to make the decision that suites the requirements of a particular organization. The approach is based on the modified ID3 algorithm implemented in the DoctuS expert system shell. Results of the developed knowledge model on selecting relevant criteria for leading commercially available solutions is presented and discussed.

IT management; IT Security; Decision-making; Decision support systems; Expert systems

nije evidentirano