Model Driven Development of Information Security System
Ivan Gaidarski · Problems of Engineering Cybernetics and Robotics · 2021
It is vital for the modern organization to protect its information in all forms -electronic and physical.Traditionally, the threat to information systems comes from outside to inward direction.Nowadays, corporate information is more vulnerable to internal threats operating from the inside out by employees of the organization -"Insiders".In this article we discuss method for development of information security system (ISS), by using Model Driven Engineering, which is dealing with models and model transformation.We focus on protection of information that is sensitive to the organization, protecting it from leakage or theft by insiders.The development of the ISS take into account the legislation, standards and regulations in force in the respective territory for the protection of confidential or sensitive information.Model building and subsequent transformation is performed by using appropriate tools such as Conceptual modelling and standardized Unified Modeling Language (UML).In the process of development of the ISS we create the following models: Conceptual (Guiding Model) model, Project Model, and we carry out transformation of a Conceptual Model to a Project Object Oriented Model of ISS.