Pareto-Optimal Situaton Analysis For Selection Of Security Measures

A methodology of selection of security measures is presented and a prototype implementation in the form of a hybrid expert system is described. This expert system is applicable, first of all, in the security management. It enables a user to select security measures in a rational way based on the Pareto optimality computation using a discrete dynamic programming method. This enables one to select rational countermeasures taking into account the available resources instead of using only hard constraints prescribed by standards. The prototype expert system is presented that provides a rapid security solution for a class of known information systems. Coarse-grained security can be analyzed in such a way at present, using a finite number of levels (security classes) as security metrics. This is a basis of the graded security methodology.