An Investigation of the Design and Implementation Flaws of Information Systems Security Models
Nicholas L. Norfolk · 2007
Research has been conducted that has separately evaluated the qualitative and quantitative aspects of information systems security models. This split in methodology has caused a problem for both technical and nontechnical people. Since research has been done neglecting critical aspects of models, further investigation and experimentation is needed to pinpoint design and implementation flaws in information systems security models. This investigation is aimed at understanding different design and implementation flaws of models, including, but not limited to, the following: technical, economic, and human aspects. Collectively, these findings will not only highlight the problems in the models, but also lead to a better understanding of the models as a whole. This information can then be used to create a framework for a model that will overcome the flaws of existing models by being practical and robust. Thus, it will be a legitimate application in the information security world.