An Architecture Based on Agent-manager Model for Automated Data Collection of Security Metrics

The requirement of organizations on computer network makes information security a key element to the evolution and continuity of services in our society. Security metrics are developed in order to offer a quantitative and objective basis for security assurance. This study proposes an architecture based on the agent-manager management model to allow the automated data collection from several components in a computer network, aiming to expand the security metrics application. A tool for measurement and automated data collection of metrics based on the architecture proposed were developed and applied in a real computer environment. Tests were performed showing that the architecture proposed is able to integrate information control and support the security monitoring process. Keywords-computer network; security metrics; security management; automated data collection.