Managing information security in a business network of machinery maintenance services business - Enterprise architecture as a coordination tool

Journal of Systems and Software

Volumn 80, Issue 10, 2007, Pages 1607-1620

  Pulkkinen, Mirja ^a   Naumenko, Anton ^a   Luostarinen, Kari ^b  

^a UNIVERSITY OF JYVÄSKYLÄ   (Finland)

^b METSO PAPER INC   (Finland)

Author keywords

Enterprise architecture (EA); Identity and access management (IAM); Information security management; Security architecture

Indexed keywords

ENTERPRISE RESOURCE PLANNING; INFORMATION THEORY; MAINTENANCE; MOTIVATION; NETWORK ARCHITECTURE;

BUSINESS ENTERPRISE ARCHITECTURE; BUSINESS NETWORKS; INFORMATION EXCHANGE; INTEGRATED SECURITY MANAGEMENT; SECURITY ARCHITECTURE;

SECURITY OF DATA;

EID: 34547744968     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jss.2007.01.044     Document Type: Article

References (49)

1. Ambler, S.W., 2002. Introduction to the Enterprise Unified Process (EUP). Ronin International Inc. http://www.enterpriseunifiedprocess.info/downloads/eupIntroduction.pdf (Accessed 05.05.2006).
2. Bajaj, S. et al. 2003. Web Services Federation Language 1.0. Specification.
3. Braa K., and Rolland K.H. Horizontal information systems: emergent trends and perspectives. In: Baskerville R., Stage J., and DeGross J.I. (Eds). Organizational and Social Perspectives on Information Technology (2000), Kluwer Academic Publishers, Boston 83-101
4. Britton C., and Bye P. IT Architectures and Middleware. second ed. (2004), Addison-Wesley, Boston
5. Chalmeta R., Campos C., and Grangel R. Reference architectures for enterprise integration. Journal of Systems and Software 57 (2001) 175-191
6. Ferraiolo, D., Kuhn, D., Chandramouli, R., 2003. Role-Based Access Control, Artech House, 316 pp., ISBN:1580533701.
7. Fontana A., and Frey J.H. The interview: from structured questions to negotiated text. In: Denzin N.K., and Linthicum D. (Eds). Handbook of Qualitative Research (2000), Sage, London 645-672
8. Fowler M. Patterns of Enterprise Application Architecture (2003), Addison-Wesley
9. GAO, 2003. A Framework for Assessing and Improving Enterprise Architecture Management, version 1.1. Information Technology Executive Guide, United States General Accounting Office. Report GAO-03-584G, April 2003.
10. Hasselbring W. Information system integration. Communications of the ACM 43 6 (2000) 32-38
11. Hatala, M., Eap, T., Shah, A., 2005. Federated Security: Lightweight Security Infrastructure for Object Repositories and Web Services. In: Proceedings of The International Conference on Next Generation Web Services Practices (NWeSP).
12. Heikkilä J., Heikkilä M., and Lehmonen J. Sharing for understanding and doing for learning: an emerging learning business network. The ICFAI Journal of Knowledge Management III 1 (2005) 28-45
13. Hirvonen, A., 2005. Enterprise Architecture Planning in Practice. Faculty of Information Technology, University of Jyväskylä. Doctoral Dissertation in Information Systems Science.
14. Hirvonen, A., Pulkkinen, M.A., 2004. Practical Approach to EA Planning and Development: the EA Management Grid. In: Abramowicz, W., BIS, (Eds.), Proceedings of 7th International Conference on Business Information Systems. Poznan, Poland, pp. 284-302.
15. Hodder I. The interpretation of documents and material culture. In: Denziu N.K., and Lincoln Y.S. (Eds). Handbook of Qualitative Research. second ed. (2000), Sage, London 703-716
16. IFIP-IFAC, 1999. Generalised Enterprise Reference Architecture and Methodology (GERAM), Version 1.6.3, Report of the IFIP-IFAC Task Force on Architectures for Enterprise Integration.
17. Jayaratna N. Understanding and Evaluating Methodologies. NIMSAD - A Systemic Framework (1994), McGraw-Hill, New York
18. Kienzle, D., Elder, C., 2002. Final Technical Report: Security Patterns for Web Application Development. Univ. of Virginia.
19. Lapkin A. The gartner enterprise architecture framework. ITXPO Symposium (2003), Gartner Inc.
20. Lee, Y.A., 2005. Dynamic virtual organization solution for web-services based grid middleware. In: Proceedings of Sixteenth International Workshop on Database and Expert Systems Applications.
21. Leem, C.S., Kim, S., 2002. Introduction to an integrated methodology for development and implementation of enterprise information systems. In: The Journal of Systems and Software. Elsevier Science Inc., vol. 60, pp. 249-261.
22. Liberty Alliance Project web site, http://www.projectliberty.org/.
23. Linthicum D. Next Generation Application Integration: From Simple Information to Web Services (2004), Addison-Wesley, Boston
24. Lowe, G.A., 1997. Hierarchy of authentication specifications. In: 10th Computer Security Foundations Workshop (CSFW '97), p. 31.
25. META Group Inc., 2002. Enterprise Architecture. Desk Reference.
26. NIST, 1989. Special Publication 500-167 Information Management Directions: The Integration Challenge by Elizabeth N. Fong and Alan H. Goldfine, September.
27. Olle T.W., Hagelstein J., Macdonald I.G., Rolland C., Sol H.G., van Assche F.J.M., and Verrijn-Stuart A.A. Information Systems Methodologies: A Framework for Understanding. International Federation for Information Processing (IFIP) (1988), Addison-Wesley, New York
28. Pereira, C.M., Sousa, P., 2004. A method to define an enterprise architecture using the Zachman framework. In: Proceedings of The Symposium on Applied Computing (SAC), Nicosia, Cyprus.
29. Perks C., and Beveridge T. Guide to Enterprise IT Architecture (2003), Springer, New York
30. Pulkkinen, M., 2006. Systemic management of architectural decisions in enterprise architecture planning: four dimensions and three abstraction levels. In: Sprague, R.H. Jr (Ed.), The Proceedings of the 39th Annual Hawaii International Conference on System Sciences (HICSS), p. 179.
31. Pulkkinen M., and Hirvonen A. EA planning, development and management process for agile enterprise development. In: Sprague Jr. R.H. (Ed). Proceedings of the Thirty-Eighth Annual Hawaii International Conference on System Sciences (2005), IEEE Computer Society, Big Island, Hawaii
32. Putman J. Architecting with RM-ODP (2001), Prentice Hall
33. Pyötsiä J. ICT opportunities and challenges for remote services. Proceedings of the 1-st International IFIP/WG12.5 Working Conference on Industrial Applications of Semantic Web, August 25-28, 2005 (2005), Springer, IFIP, Jyvaskyla, Finland 213-225
34. Rescorla, E., 2000. RFC 2818: HTTP over TLS.
35. Rosenfeld S. Industrial Strength Strategies: Regional Business Clusters and Public Policy (1995), Aspen Institute, Washington, DC
36. Russell D., and Gangemi G.T. Computer Security Basics (1991), O'Reilly & Associates
37. Security Assertion Markup Language (SAML) v2.0, OASIS Security Services TC, http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security.
38. Shaikh, R., Rajput, S., Zaidi, S., Sharif, K., 2005. Comparative analysis and design philosophy of next generation unified enterprise application security. In: Proceedings of The International Conference on Emerging Technologies, Islamabad.
39. Sowa J.F., and Zachman J.A. Extending and formalizing the framework for information systems architecture. IBM Systems Journal 31 3 (1992) 590-616
40. Spewak S.H. Enterprise Architecture Planning: Developing a Blueprint for Data, Applications and Technology (1992), John Wiley&Sons, New York, Chichester
41. The Open Group: The Open Group Architecture Framework (TOGAF) Version 7 Technical Edition, Version 8 Enterprise Edition. Document Nr 1911 (December 2002). The Open Group 2002. Accessed 13.01.2004 at http://www.opengroup.org/togaf/.
42. Weaver, A., 2004. Enforcing distributed data security via Web services. In: Proceedings. 2004 IEEE International Workshop on Factory Communication Systems.
43. Web Services Security, 2006. SOAP Message Security 1.1 (WS-Security 2004), OASIS Standard Specification.
44. Weiss, M., 2003. Patterns for web applications. In: The 10th Conference on Pattern Languages of Programs.
45. Whitman L., Ramachandran K., and Ketkar V. A taxonomy of a living model of the enterprise. Proceedings of the 2001 Winter Simulation Conference (2001), IEEE 848-855
46. Witty, R., 2003. The Identity and Access Management Market Landscape, Gartner Research Note COM-21-4534.
47. Witty, R., Allan, A., Enck, J., Wagner, R., 2003. Identity and Access Management Defined, Gartner Research Note SPA-21-3430.
48. Yin R.K. Case Study Research - Design and Methods. second ed. (1994), Sage
49. Zachman J.A. A framework for information systems architecture. IBM Systems Journal 26 3 (1987) 276-292