Author(s)

Joseph E. Mbowe¹, Simon S. Msanjila², George S. Oreku³, Khamisi Kalegele¹

¹School of Computational and Communication Science and Engineering, The Nelson Mandela African Institution of Science and Technology, Arusha, Tanzania.
²Faculty of Science and Technology, Mzumbe University, Morogoro, Tanzania.
³Faculty of Economics, North West University, Vanderbijlpark, South Africa.

The integration of organisation’s information security policy into threat modeling enhances effectiveness of security strategies for information security management. These security policies are the ones which define the sets of security issues, controls and organisation’s commitment for seamless integration with knowledge based platforms in order to protect critical assets and data. Such platforms are needed to evaluate and share violations which can create security loop-hole. The lack of rules-based approaches for discovering potential threats at organisation’s context, poses a challenge for many organisations in safeguarding their critical assets. To address the challenge, this paper introduces a Platform for Organisation Security Threat Analytic and Management (POSTAM) using rule-based approach. The platform enhances strategies for combating information security threats and thus improves organisations’ commitment in protecting their critical assets. R scripting language for data visualization and java-based scripts were used to develop a prototype to run on web protocol. MySQL database management system was used as back-end for data storage during threat analytic processes.

Security Threats Analytic, Threat Visualization, Security Management, Automated Security Policies

Mbowe, J. , Msanjila, S. , Oreku, G. and Kalegele, K. (2016) On Development of Platform for Organization Security Threat Analytics and Management (POSTAM) Using Rule-Based Approach. Journal of Software Engineering and Applications, 9, 601-623. doi: 10.4236/jsea.2016.912041.