Aplicativo para la gestión de incidentes de seguridad NTC/ISO/IEC 27002-27035 para el caso de uso de la Universidad Distrital

Abstract

8ABSTRACTThe IXION-UD Manager application management Incident Information Security according to ISO 27035 forWeb Applications of the University Francisco José de Caldas, allow the advisory office of the University System (OAS) Maintain UN Process Attention, tracking and resolution of reported incidents that reveal vulnerabilities in which UN System Risk implications foractive information handled by the university.To design the application Indications regulations that indicates the family of standards ISO 27000 forInformation Security, with special emphasis on the ISO 27035 and 27002 as standard treatment for Incident Management and evaluation of controls were followed Security respectively.In the development of this application programming paradigm implemented: MVC (Model View Controller), which guarantees the quality in development, making the system robust sea, for friendly flexibility and end user. For the implementation of paradigminclusion of Zend Framework that offered us a facility at the time of development it was done.The programming language used is PHP 5.2 with integration of the motor base9.3 Data Postgres as indicated by (OAS), just as USE Open UP Development Methodology / Becomes OAS since it is a methodology of Agreement, a Do Working proposal meets the needs of development, design and deployment, allowing achieve the objectives.