TCO-aware provisioning of information security infrastructure

Stephenson, Bryan

HP Development Company

关键词: TCO automated security infrastructure provisioning;   

RP-ID  :  HPL-2008-195

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

As IT infrastructure proliferates, higher-level security controls must become interpretable and enforceable by machines, largely without human intervention. We establish a single provisioning model and process for addressing security and the Total Cost of Ownership (TCO). The innovation is the combination of these two aspects of provisioning hosted software in the same process and model. Provisions are made for comparing alternatives and justifying design and mechanism-selection decisions, based on their impact on the TCO of the system being protected. While TCO calculations may be estimations and qualitative, quantitative arguments can still be incorporated to validate all security infrastructure provisioning decisions made with respect to both security and TCO.