title: A layered trust information security architecture.
abstract: Information can be considered the most important asset of any modern organization. Securing this information involves preserving confidentially, integrity and availability, the well-known CIA triad. In addition, information security is a risk management job; the task is to manage the inherent risks of information disclosure. Current information security platforms do not deal with the different facets of information technology. This paper presents a layered trust information security architecture (TISA) and its creation was motivated by the need to consider information and security from different points of view in order to protect it. This paper also extends and discusses security information extensions as a way of helping the CIA triad. Furthermore, this paper suggests information representation and treatment elements, operations and support components that can be integrated to show the various risk sources when dealing with both information and security. An overview of how information is represented and treated nowadays in the technological environment is shown, and the reason why it is so difficult to guarantee security in all aspects of the information pathway is discussed.
authors.affiliation: Group of Analysis, Security and Systems (GASS), Department of Software Engineering and Artificial Intelligence (DISIA), Faculty of Information Technology and Computer Science, Office 431, Universidad Complutense de Madrid (UCM), Calle Profesor José García Santesmases, 9, Ciudad Universitaria, 28040 Madrid, Spain. fabio@fdi.ucm.es.
authors.forename: Robson
authors.initials: R
authors.lastname: de Oliveira Albuquerque
authors.affiliation: Group of Analysis, Security and Systems (GASS), Department of Software Engineering and Artificial Intelligence (DISIA), Faculty of Information Technology and Computer Science, Office 431, Universidad Complutense de Madrid (UCM), Calle Profesor José García Santesmases, 9, Ciudad Universitaria, 28040 Madrid, Spain. javiergv@fdi.ucm.es.
authors.forename: Luis Javier García
authors.initials: LJ
authors.lastname: Villalba
authors.affiliation: Group of Analysis, Security and Systems (GASS), Department of Software Engineering and Artificial Intelligence (DISIA), Faculty of Information Technology and Computer Science, Office 431, Universidad Complutense de Madrid (UCM), Calle Profesor José García Santesmases, 9, Ciudad Universitaria, 28040 Madrid, Spain. asandoval@fdi.ucm.es.
authors.forename: Ana Lucila Sandoval
authors.initials: AL
authors.lastname: Orozco
authors.affiliation: Electrical Engineering Department, University of Brasilia, Campus Universitário Darcy Ribeiro, Asa Norte, 70910-900 Brasilia, DF, Brazil. fabio@fdi.ucm.es.
authors.forename: Fábio
authors.initials: F
authors.lastname: Buiati
authors.affiliation: School of Engineering and ICT, University of Tasmania, Private Bag 87, Hobart, TAS 7001, Australia. taihoonn@daum.net.
authors.forename: Tai-Hoon
authors.initials: TH
authors.lastname: Kim