XML-based Information Assurance Vulnerability Management for Sustained System Saftety

摘要

This paper suggests an XML-based information assurance vulnerability management (IAVM) for sustained systemsafety. Once an information assurance vulnerability notice(IAVN) is given for a sustained system to improve systemsafety, it is useful for reducing massive system engineering efforts for analysis and management of system safety,when the system is updated by a security patch. By employing XML technology, we can achieve seamless andefficient management between heterogeneous system format as well as data formats in analysing and exchangingthe pertinent information for system safety. Thus, when a system is updated to improve system safety, the proposedXML-based IAVM mechanism analyse the security model and posture of affected sustained system and minimizethe propagated negative impact. This approach use XML Document Object Model (DOM) and XSLT/Xpathlanguage to manage IAVN as a system safety policy and system resource information. This paper also discusses acase study with IAVN of the computer emergency response team (CERT) in government information systems.Then, an executable architecture for implementation to verify the proposed scheme and algorithm and testingenvironment is presented to mitigate vulnerable systems for sustained system safety.