Automated Security Architecture Formulation and Deployment
AssigneeInternational Business Machines Corporation
InventorThomas Tahan
Life of this patent
Estimating the term…
Abstract
Formulating a security architecture for an information system is provided. A description of a target environment of the information system is received. The description includes a network zone architecture. A description of one or more security requirements for the information system is received. One or more reference architectures for the information system are selected from a plurality of reference architectures based on the description of the one or more security requirements for the information system. One or more selected reference architectures are adapted to the target environment for the information system.
Claims28
A method for formulating a security architecture for an information system, the method comprising:
- receiving a description of a target environment of the information system, the description including a network zone architecture;
- receiving a description of one or more security requirements for the information system;
- selecting one or more reference architectures for the information system from a plurality of reference architectures based on the description of the one or more security requirements for the information system;
- and
- adapting one or more selected reference architectures to produce one or more adapted reference architectures for the target environment.
A computer system for formulating a security architecture on an information system, the computer system comprising:
- a bus system;
- a storage device connected to the bus system, wherein the storage device stores program instructions;
- and
- a processor connected to the bus system, wherein the processor executes the program instructions to:
- receive a description of a target environment for the information system, the description including a network zone architecture;
- receive a description of one or more security requirements for the information system;
- select one or more reference architectures for the information system from a plurality of reference architectures based on the description of the one or more security requirements for the information system;
- and
- adapt one or more selected reference architectures to produce one or more adapted reference architectures for the target environment for the information system.
A computer program product for formulating a security architecture on an information system, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:
- receiving a description of a target environment for the information system, the description including a network zone architecture;
- receiving a description of one or more security requirements for the information system;
- selecting one or more reference architectures for the information system from a plurality of reference architectures based on the description of the one or more security requirements for the information system;
- and
- adapting one or more selected reference architectures to produce one or more adapted reference architectures for the target environment for the information system.
Dependencies are inferred from the claim text.