Modellierung der Sicherheit von Informationssystemen mit DROPS

The complexity of an organization's security problem can be reduced by modelling security issues of business information systems. This facilitates analyzing and detecting security requirements and optimal operational alternatives (i.e. suitable security measures). DROPS (dimension-relational organization and problem oriented security model) is a model for the security of information systems enabling these issues. The approach DROPS is based on is holistic, integrative and scaleable. For example, security considerations concerning information systems are often limited to a technical perspective (IT-security). DROPS allows modelling a mere technical view as well as the integration of non-technical system components (e.g. personnell). Furthermore, non-technical security measures (e.g. organizational issues) can be included into the model. The composition of DROPS offers an organization the opportunity to integrate individual elements of a security problem and their relations. Essential characteristics of specific business processes can be considered this way. In practical application, first of all the choice of suitable security measures is facilitated. Second, DROPS can be used to model actual and/or aspired security requirements and the security system of an organization.