Creating a Security Methods Taxonomy for Information Resource Management

Abstract

People who are concerned with security are naturally interested in methods of achieving security. This paper proposes an approach to creating a security methods taxonomy which can be used for security management and the management of security-related information resources when security methods are the focus. The framework of the taxonomy is based on facet analysis and a tetra-facet model of security, which identifies four facets of security: subject/scope of security, object of protection, source of insecurity, and method of protection. A taxonomy of security methods can be created by combining two of the facets: source of insecurity and method of protection.