Octopus: University of The Aegean Research & Project Outputs System

Conference

Authors:	Kokolakis S., Karyda M., Gritzalis D.
Title:	Information systems security management in virtual organizations
Conference:	4th International Conference on Security in Information Systems (SIS2000)
Editors:
Ed:	No
Eds:	Yes
Pages:	109-125
To appear:	No
Month:	October
Year:	2000
Place:	Zurich, Switzerland
Pubisher:
Link:
File name:	B1.pdf##^^&&688558004.pdf
Abstract:	The virtual organization is a new form of organization possessing the characteristic of incorporating business units with a high degree of autonomy. This form of organization, which is expected to become the dominant organizational paradigm for the 21st century, strongly depends on the effectiveness of cooperation among the autonomous Information Systems (IS) of each business unit. Developing a security policy and installing security controls for each IS appears as a prerequisite for the survival of the virtual organization, but on the other hand it may severely hinder IS cooperation, as policies and controls often give rise to conflicts and interoperability problems. In this paper, we analyse the problem of managing IS security in multi-policy environments and introduce a Security Policies Management System (SPMS) that facilitates the management of IS security in virtual organizations and supports the resolution of conflicts between security policies.