An Integrated use of ISO27005, Mehari and Multi-Agents System in order to Design a Comprehensive Information Security Risk Management Tool

Abstract

While there are many framework which help users in Security Risk Assessment, the authors of this paper know of none which actually try to automate the process by using multi agent system. This article presents a multi-agent expert system, a web-based solution where users create autonomous agents to perform an information security assessment. Users specify parameters to guide and constrain an agent's overall behavior. The key element that differentiates this research from the previous ones is that none of them are based on multi-agents system. General Terms Security risk assessment, risk management system, framework, audit, information system.