Simon´s Intelligence Phase for Security Risk Assessment in Web Applications

Organizations in this digital era use automated information technology systems to process their information in order to support their missions. Web applications (WA) offer services for business processes that imply handling organization valuable information. Their requirements have become more complex so as to guarantee information security. Security risk assessment (SRA) plays a critical role in protecting an organization´s information assets. The main query has to do with which is the best form to determine what needs to be protected. This research refers Simon´s pattern, specifically the intelligence phase, which is used to: (a) examine and monitor SRA reality in WA, and (b) identify and define essential problems in vulnerabilities determination and their consequences. This study establishes the bases for constructing an authentic problem pattern and how it can be attacked.