A recursive method for validating and improving network security solutions

Abstract

We present a simple and efficient method called Validate Improve Recur (VIR) to assess and improve information security solutions. We consider validation and improvement of new security designs and evaluation of existing security implementations. The presented work will enable security administrators and evaluation facilities to improve security solutions, identify, monitor, and manage risks that may propagate to final security implementations. As a self-assessment method inexperienced users can also apply VIR to design and evaluation tasks. © 2008 Atilla Elçi.