An Intelligent Agent-Based Framework for Information Security Management

摘要

Many organizations have introduced an Information Security Management System (ISMS) to improve their security information management. Contemporary management of information security involves various approaches, ranging from technology to organizational issues. According to international standard ISO/IEC 27001:2005, this paper presents an attempt to apply agent-based modeling to establish an information security management framework where machine learning technologies are incorporated. Within the framework, five types of agents are modeled in details. To foster the practical use of the framework in this paper, some critical issues are discussed.