Browsing by Author "Huang, Chien-Cheng"

Now showing 1 - 2 of 2

A Study on Information Security Management with Personal Data Protection
(2011)
Huang, Chien-Cheng
;
Farn, Kwo-Jean
;
Lin, Frank Yeong-Sung
;
資訊管理與財務金融系註：原資管所+財金所
;
Department of Information Management and Finance
In the process of standardization, whether the announcement of a standard represents a cause or an outcome, it is opportunity of the trend of standardization or achievement. The process of standardization is to understand "why" and "how" to explore the detailed outline of a time flow. From a long-term perspective, a standard is the milestone of the standardization process. On May 26th 2010, with the announcement of the Personal Data Protection Act in Taiwan, information security management (ISM) of the Personal Data Protection Act has received much attention from the public. This study is centered on the working items of standards announced by the International Organization for Standardization (ISO) and the ongoing information security management system (ISMS) standards and standardization in order to propose standards which comply with the ISMS of the Personal Data Protection Act and methods which increase implementation control measures.
Software Vulnerability Patch Management with Semi-Markov Decision Process
(2013-11-01)
Huang, Chien-Cheng
;
Farn, Kwo-Jean
;
Lin, Feng-Yu
;
Lin, Frank Yeong-Sung
;
資訊管理與財務金融系註：原資管所+財金所
Information security incidents frequency has been increasing dramatically, the aim of this study is to analyze the state-space reachability problems through the transition of vulnerable status after the informative system vulnerability exposure. In this research we took into consideration the time factor to analyze the arrival time to reachable states problem discussed in stochastic Petri nets. The mean arrival time and variance of the process between starting from an initial state and arriving at reachable states. We will therefore elaborate a novel model based on the semi-Markov stochastic Petri nets model for analyzing the period between the exposure of the vulnerability and the completion of its patch. We use the semi-Markov process to analyze the state-space reachability problems of the stochastic Petri nets, resulting in a novel model for software vulnerability patch management. Moreover, we include also the concept of discounted multi-objective semi-Markov decision process to obtain the total of the efficient extreme point set.