Service-oriented approach to visualize IT security performance metrics

Abstract

In this paper we propose a metrics visualization system design. Visualization is a key component in our Policy-Based Metrics Framework for Information Security Performance Measurement. To achieve openness and interoperability we have based our approach on a Service Oriented Architecture. The tight integration of a visualization component into our framework allows improved control of the metrics collection process, gives continuous access to security performance information, shows deviations between current data and set targets and displays developing trends. Thus management is enabled to more thoroughly understand their business' security posture and is supported in their IT security related decision making processes. © 2007 International Federation for Information Processing.