Development of methodologies using metrics for the calculation and application of security indicators.

• Grant number: 09/02131-0
• Support Opportunities: Scholarships in Brazil - Doctorate
• Start date: June 01, 2009
• End date: May 31, 2013
• Field of knowledge: Engineering - Electrical Engineering - Telecommunications
• Principal Investigator: Leonardo de Souza Mendes
• Grantee: Rodrigo Sanches Miani
• Host Institution: Faculdade de Engenharia Elétrica e de Computação (FEEC). Universidade Estadual de Campinas (UNICAMP). Campinas , SP, Brazil

Abstract

The issues related to information security are increasingly present in everyday business, public initiative and home users.Information security data reported in Brazil, show the growth in the number of security incidents and encourage the study and development of the information security research area.Two research centers are responsible for providing a lot of data on information security in Brazil: CERT.br (Computer Emergency Response Team in Brazil) and CAIS (Security Incident Response Team). The data basically deal of security incidents as intrusions, denials of service, viruses and spam. However, to define an overview on information security in Brazil is needed other sources of data such as number of secure wireless connections, workstations with updated antivirus, servers with patches updated, availability of servers, systems within the security policies, and others.This project proposes the development of standard indicators for different areas of information security using the concept of security metrics and to study the dependability between one or more security metrics. The application of indicators will enable the development of a database for data extraction and correlations and thus help to draw the information security map in the country.

Academic Publications

(References retrieved automatically from State of São Paulo Research Institutions)

MIANI, Rodrigo Sanches. On the use of metrics and quantification in information security. 2013. Doctoral Thesis - Universidade Estadual de Campinas (UNICAMP). Faculdade de Engenharia Elétrica e de Computação Campinas, SP.