Configuration and Access Control Automating Systems for Computer Network Switches Based on ISO/IEC 27001:2013 Standard

Abstract

The purposes of this research were to 1) develop the configuration and access control automating systems for computer network switches based on ISO/IEC 27001:2013 standard, and 2) evaluate the performance of the configuration and access control automating systems for computer network switches. The research was conducted by analysis and security risk assessment of computer networks based on ISO/IEC 27001:2013 standard. Then the configuration and access control systems for computer network switches were designed and developed comprising automating functions such as configuration, status monitoring, and notification. Such automating procedures were generated by MySQL, PHP and Python programming in JSON format and operated with SNMP protocol. The developed configuration and access control automating systems were installed and implemented in 5 test cases to evaluate automating performance regarding ISO/IEC 27001:2013 standard. Consequently, the results showed that the overall performance of the developed systems in automation aspects was at the highest level ( = 4.51, S.D. = 0.49), and security risk assessment level corresponding to ISO 27001: 2013 Annex A.9.4 System and Application Access Control was degraded to the very low level (VL) in all risk aspects.