Security Modelling for Integrated Information Systems over the Internet
Jianming Yong · University of Southern Queensland ePrints (University of Southern Queensland) · 2004
[Abstract]: This paper provides a proof of concept for a security modelling framework to manage the complexity of security access control in integrated systems that are emerging due to the connectivity of the Internet. We outline a series of matrices which provide a means to conceptually define and manage all of the various security relationships that arise in an integrated set of systems. The security framework for integrated systems consists of two tiers. Tier 1 is in charge of local systems. Tier 2 is in charge of overall security of an integrated system. Then an extended tier, Tier 3, is deduced. Tier 3 is in charge of all over the Internet. By implementing this extended three-tier security architecture, all relevant systems security is enforced.