Information security in implementing web applications for small businesses based on COBIT5-SI [Seguridad de la Información en la implementación de aplicaciones web para pequeñas empresas en base a COBIT5-SI]

The Information Security is one of the preventive measures to take account for the proper functioning of applications in small and medium enterprises in Ecuador, thus ensuring reliability, availability and integrity of assets, primarily within their web applications measures. This work is based on t...

Fuld beskrivelse

Saved in:
Bibliografiske detaljer
Hovedforfatter: Salazar, K. (author)
Andre forfattere: Guaman Bastidas, F. (author), Jaramillo Hurtado, D. (author)
Format: article
Udgivet: 2015
Fag:
Online adgang:http://10.1109/CISTI.2015.7170390
http://dspace.utpl.edu.ec/handle/123456789/19030
Tags: Tilføj Tag
Ingen Tags, Vær først til at tagge denne postø!
Beskrivelse
Summary:The Information Security is one of the preventive measures to take account for the proper functioning of applications in small and medium enterprises in Ecuador, thus ensuring reliability, availability and integrity of assets, primarily within their web applications measures. This work is based on the integration of the governance framework for Cobit5-SI safety, UWE modeling methodology and open security OWASP project, obtaining the best practices for evaluating the Information Security in implementing web applications these companies. Similarly, the selection of these practices was conducted with the integration of the ISF, ISO / IEC 27001, ISO / IEC 27002, ITIL and NIST.