公开(公告)号：US20050080720A1

公开(公告)日：2005-04-14

申请号：US10683022

申请日：2003-10-10

申请人： Linda Betz ,  George Blakley ,  Donald Cronin ,  David Hemsath ,  Paul Landsberg ,  Christopher O'Connor ,  Ronald Perez ,  James Ward ,  Richard Wood

发明人： Linda Betz ,  George Blakley ,  Donald Cronin ,  David Hemsath ,  Paul Landsberg ,  Christopher O'Connor ,  Ronald Perez ,  James Ward ,  Richard Wood

IPC分类号： G06Q40/00 ,  G06F17/60

CPC分类号： G06Q40/08 ,  G06Q40/025

摘要： Techniques are disclosed for systematically assessing an enterprise's security risks in view of a set of security patterns. Each pattern that is applicable to the enterprise's operation is then considered against the backdrop of a set of common attributes that are used, in turn, to further distinguish each pattern from a risk and security solution perspective. Using the disclosed techniques, specific security risks can be identified and appropriate security products can be selected to address those risks in a systematic manner, thereby assisting information technology decision makers across a wide variety of enterprises in deriving security solutions. These security solutions will typically be more effective and efficient from a functional perspective, as well as being more cost-effective, than security solutions created using prior art ad hoc approaches. The disclosed techniques may also be leveraged to create a requirements list for function to be included in a security product.

摘要翻译： 公开了一种系统地评估企业的安全风险的技术，以鉴于一套安全模式。 那么适用于企业运营的每个模式都是在一组常用属性的背景下进行考虑的，而这些属性又被用于进一步区分每种模式与风险和安全解决方案的角度。 使用公开的技术，可以确定具体的安全风险，并且可以选择适当的安全产品来系统地解决这些风险，从而帮助各种企业的信息技术决策者获得安全解决方案。 与使用现有技术的临时方法创建的安全解决方案相比，这些安全解决方案通常从功能角度更有效和高效，并且更具成本效益。 还可以利用所公开的技术来创建要包括在安全产品中的功能需求列表。

公开(公告)号：US20050177384A1

公开(公告)日：2005-08-11

申请号：US10775643

申请日：2004-02-10

申请人： Donald Cronin ,  David Janson

发明人： Donald Cronin ,  David Janson

IPC分类号： G06Q30/00 ,  G06F17/60

CPC分类号： G06Q30/02

摘要： A method of architecting, designing and building an e-business system includes identifying one or more domains relevant to the design and implementation of the e-business system. Each domain includes one or more patterns having domain-specific information. A system designer, for example, generates an intermediate set of patterns by selecting patterns from one or more of the identified domains according to predetermined criteria. The designer then refines the intermediate set of patterns by applying increasingly narrower criteria to the intermediate set of patterns. Combining patterns in the intermediate set of patterns then produces a multi-domain pattern that defines various components of the e-business system.

摘要翻译： 构建，设计和构建电子商务系统的方法包括识别与电子商务系统的设计和实现相关的一个或多个域。 每个域包括一个或多个具有域特定信息的模式。 例如，系统设计者根据预定标准通过从一个或多个所识别的域中选择模式来生成中间模式集合。 然后，设计师通过将越来越窄的标准应用于中间模式集合来优化中间集合的模式。 在中间模式集合中组合模式然后产生定义电子商务系统的各种组件的多域模式。