Design of the decision support system for network security management to secure enterprise network

Abstract

Decision Support System for Network Security Management is asystem that evaluates the security of a network domain consists of various componentsand that supports a security manager in making decisions about securitymanagement of the network based on the evaluation. It helps the security managerto make a decision about how to change the configuration of the network toprevent the attack due to the security vulnerabilities of the network. DecisionSupport System for Network Security Management checks the current status ofthe network, predicts the possible intrusion and supports decision-making aboutsecurity management to prevent the intrusion in advance. In this paper we analyzethe requirements of the Decision Support System for Network SecurityManagement that automates the security evaluation of the network and that supportsdecision-making about security management to secure the network, andwe propose a design for it that satisfies the requirements. We also provide aprototype that implements the basic functions of our design.