Security management in a dynamic services' infrastructure : A risk management approach
type: Dataset
description: Changes in economic environment impose new organizational strategies to companies: refocusing business and creating collaboration strategies. These trends point to an exponential growth of service ecosystems accessible to both end users and partners. All foreshadows that these ecosystems rely heavily on service-oriented architectures that can build information systems having the required agility and supporting the interconnection of collaborative business processes by composing processes dynamically from distributed services. This type of architecture that ensures business and information systems alignment, makes it essential to take into account security constraints at the services’ and the composition’s levels. In a distributed and dynamic services’ environment, security should not be limited to providing technological solutions but to find a security strategy taking into account the business, organizational and technological dimensions. Besides, the security must be considered as an ongoing process that aims to optimize security investments and ensures the sustainability of implemented security measures. However, the models and reference architectures in the services’ domain have underestimated the definition of security requirements, assets to protect and the identification of risks to those assets. Therefore, we propose to address the security management issues by a risk management approach to identify the different types of risks and propose the most appropriate security measures to the context. Nevertheless, risk management is a real challenge in an open collaborative services’ environment. The methods of risk management developed in the context of information systems do not meet the security requirements in an open environment and are not suitable for dynamic environments. To overcome these limitations, we propose a methodological framework for security management covering the phases: preparation, design, execution and supervision of the services’ lifecycle.…
landing page: https://theses.hal.science/tel-00828598
identifier: NNT: 2012ISAL0102
keyword: architecture-orientee-services
keyword: gestion-de-la-securite
keyword: gestion-des-risques
keyword: infoeu-reposemanticsdoctoralthesis
keyword: information-system
keyword: information-technology
keyword: informatique
keyword: risk-management
keyword: securite
keyword: security
keyword: security-management
keyword: service-oriented-architecture
keyword: shsgestionhumanities-and-social-sciencesbusiness-administration
keyword: systeme-dinformation
keyword: theses
issued: 2026-05-10T22:26:33.543464
modified: 2026-05-10T22:26:33.543469
language: fr
contact point: Organization
  fn: CCSD

test_moissonnage_selune
type: Agent

Security management in a dynamic services' infrastructure : A risk management approach
type: Distribution
format: HTML
access URL: https://theses.hal.science/tel-00828598
issued: 2026-05-10T22:26:33.545788
modified: 2026-05-10T22:26:33.525826