An Information Model for Security Integration

Research on security systems has typically focused on improving the performance and reliability of a single technique, algorithm or mechanism. There is also significant potential, however, in studying security as the product of a few key systems and then analyzing how those systems can best be integrated to achieve better overall system security. Most approaches that examine integrating one or more security mechanisms have focused on a specific implementation strategy. A systematic approach to integrated system security requires an analysis of the data relationships between all of the major mechanisms leading to a model that describes and relates all of the major elements in the domain. This paper proposes a information model for integrating access control, intrusion detection and intrusion response to enhance overall system security