Author/Authors :
ABDULLAH, NOORHIDAWATI Universiti Kebangsaan Malaysia - Fakulti Teknologi dan Sains Maklumat, Malaysia , MOHAMED, IBRAHIM Universiti Kebangsaan Malaysia - Fakulti Teknologi dan Sains Maklumat, Malaysia , HAMDAN, ABDUL RAZAK Universiti Kebangsaan Malaysia - Fakulti Teknologi dan Sains Maklumat, Malaysia , OMAR, KHAIRUDDIN Universiti Kebangsaan Malaysia - Fakulti Teknologi dan Sains Maklumat, Malaysia
Abstract :
This study intends to propose an information technology (TM) auditing framework for network security controls. This framework consists of two sub- frameworks; a network security control policy sub-framework called PolisiNet, and a TM auditing process procedure sub-framework called ProsedurNet. To support the proposed framework, this research has developed a TM Auditing Decision Support System called AuditNet. AuditNet introduces the use of knowledge-based concept and it is developed based on the proposed IT auditing framework. The AuditNet system is developed using WinProlog version 4.1 for the inference engine, Visual Basic version 6.0 for the interface, and Microsoft Access version 2000 for the database.
