Abstrait

Towards the Application of Security Metrics at Different Stages of Information Systems

Irshad Ahmad Mir, Mehraj-U-Din Dar, S.M.K Quadri

A formal approach to the measurement of security in Information Systems is essential. However little thought has been given to this aspect of Information system life cycle. The attention towards the security aspect of the system has got least attention during the development process and much focus has been given to the functionality provided by the system. As the threats in the operational environment increased the attention towards incorporating security got the attention. With such incorporation of security mechanisms, the question now is how much we secure we are and what is the level of security in the system. The answer to this question can be possible by the application of security metrics and to analyse the results. Security metrics play a vital role at every stage of Information Systems development and in operational environment. This paper focus on the applicability of security metrics at the different stages of Information Systems life cycle and identifying some metrics framework present for each level of the system.