Improving Security Architecture Development Based on Multiple Criteria Decision Making

This paper describes an effort to improve security architecture development of information systems based on the multiple criteria decision making (MCDM) techniques. First, we introduce the fundamental of MCDM, describe how the security architecture is developed and analyze the main problems in the development. Finally, this paper shows how the MCDM techniques were applied to solve two problems in security architecture development. And an approach which could assist in prioritizing threats and selecting security technologies is illustrated. The practices indicate that MCDM techniques are valuable in formulating and solving problems in security architecture development.