A Conceptual Framework for Risk and Vulnerability in Virtual Enterprise Networks

6

K`q~rnges ® ?161" NGN Gbòfb) K`q~nig `r cn{srno|snig ni qrnis `r lblksrìnk d`rm{ wnse`|s wrnssli qlrmn{{nì `d NGN Gbòfb n{ qrènonslc)

Kefqslr 6

F K`iklqs|fb Drfmlw`rjd`r _n{j fic T|bilrfonbns~ niTnrs|fb Lislrqrn{l Ilsw`rj{

Hfi E|{cfb

M`bcl _l{lfrke Ni{sns|sl" I`rwf~

NIS_@C\KSN@I

S`cf~„{ |i{sfobl fic engeb~ k`mqlsnsntl o|{nil{{litnrìmlis ef{ krlfslc f {ends ni e`w lislrqrn{l{frl l{sfobn{elc fic mfifglc) Qf{s ‒srfcnsnìfb”lislrqrn{l{ frl nikrlf{nigb~ rlqbfklc o~ ilw ‒tnr-s|fb” lislrqrn{l{" d`rmnig slmq`rfr~ ilsw`rj{ `d niclqliclis k`mqfinl{ `r Tnrs|fb Lislrqrn{l Ils-w`rj{ %TLI{. sefs {efrl {jnbb{" k`{s{ fic fkkl{{s` lfke `selr„{ mfrjls) Wenbl sen{ jnic `d o|{nil{{d`rmfsnì n{ i`s wnse`|s rn{j{" mfifgnig rn{j niTLI{ n{ f rfselr |iclrluqb`rlc fic |i{sr|ks|rlc{knlisndnk frlf)Crntli o~ sel fctlis `d gbòfbb~ ftfnbfobl {jnbb{fic `qlrfsnìfb luklbblikl %[lig|qsf" ?115. ns n{ i`s|i|{|fb d`r dnrm{ ni f {|qqb~ kefni s` k`ml s`glselr fic fks f{ f TLI" fic ns n{ dr`m sen{ qlr{qlksntlsefs sel {|ohlks `d rn{j mfifglmlis ni f TLI wnbb ol luqb`rlc) Sel q|rq`{l `d sel kefqslr n{ s` fqqr`fke sel rlfbm `d TLI rn{j mfifglmlis dr`m f

FO[S_FKS

N{ mfifgnig rn{j ni Tnrs|fb Lislrqrn{l Ilsw`rj{ cnddlrlis dr`m mfifgnig rn{j ni {|qqb~ kefni{0 Ns n{ i`s |i|{|fb d`r rm{ ni f {|qqb~ kefni s` k`ml s`glselr fic fks f{ f tnrs|fb lislrqrn{l ilsw`rj %TLI. fic sel {|qqb~ kefni{ `d s`cf~„{ gb`ofbnxlc fic `|s{`|rklc o|{nil{{ litnr`imlis luenons mfi~ TLI-bnjl dlfs|rl{) B``jnig fs TLI rn{j mfifglmlis dr`m sel qlr{qlksntl `d {|qqb~ kefni rn{j mfifglmlis" k|r

-

rlis nclf{ ì TLI{ wnbb {lrtl f{ f of{l ìs` wenke nclf{ ì {|qqb~ kefni rn{j wnbb ol srfi{q`{lc) Mfi~kìklqs{ rlbfslc s` {|qqb~ kefni rn{j wnbb ol luqb`rlc fic rlbfslc s` selnr q`{{nobl TLI k`|islrqfrs{8rn{j" t|bilrfonbns~" rò|{sil{{" lunonbns~" rl{nbnlikl fic o|{nil{{ kìsni|ns~) Kìklqs|fb ni ns{ fqqr`fkefic crfwnig dr`m `selr frlf{ `d rl{lfrke" sen{ kefqslr nisr`c|kl{ d`|r cn{sniks gr`|q{ `d TLI[" ifmlb~Kì{srfnilc" Cnrlkslc" Bnmnslc fic Drll TLI" fic kìkb|cl{ sefs TLI rn{j mfifglmlis kfi fic {e`|bc blfri dr`m {|qqb~ kefni rn{j mfifglmlis)

C@N8 61)3165/>75-6-46<?1-417-1)ke116

?

F K`iklqs|fb Drfmlw`rj d`r _n{j fic T|bilrfonbns~ ni Tnrs|fb Lislrqrn{l Ilsw`rj{

{|qqb~ kefni rn{j mfifglmlis %[K_M. qlr{qlk-sntl" welrl nclf{ dr`m sel k|rrlis bnslrfs|rl ì{|qqb~ kefni rn{j" {|qqb~ kefni t|bilrfonbns~ fic{|qqb~ kefni cn{r|qsnì{ ni srfcnsnìfb lislrqrn{l{wnbb ol bnijlc s` {`ml `d sel qrltfnbnig nclf{ `d e`w s` nclfbb~ {sr|ks|rl fic `rgfinxl f TLI) L{-{lisnfbb~" k|rrlis nclf{ ì TLI{" fbìg sel bnil{`d Se`mq{ì %?115f." wnbb {lrtl f{ f of{l ìs`wenke srfcnsnìfb nclf{ ì {|qqb~ kefni rn{j wnbb ol srfi{q`{lc)Se|{" sel nclf `d sen{ kefqslr n{ s` {lrtl f{ fcl{krnqsntl rfselr sefi qrl{krnqsntl kìklqs `r drfmlw`rj d`r e`w f TLI n{ luq`{lc s` rn{j ficd|rselrm`rl s` luqb`rl e`w f TLI kfi clfb wnse q`slisnfb rn{j{" |{nig [K_M qrfksnkl{ fqqbnlc s`f TLI litnrìmlis)

OFKJG_@\IC

Ns ef{ olli m`rl sefi 6< ~lfr{ {nikl sel {efql`d s`cf~„{ tnrs|fb lislrqrn{l ilsw`rj{ olgfi s`lmlrgl weli [i`w" Mnbl{" K`blmfi" $ Elir~%6>>?. nclisndnlc ; s~ql{ `d ilsw`rj{8 6. nislrifb"?. {sfobl fic ;. c~ifmnk" sel bfsslr k`mq`{lc `d ‒blfc dnrm{ we` nclisnd~ ilw `qq`rs|insnl{ ficseli f{{lmobl f ilsw`rj `d k`mqblmlisfr~ dnrm{sefs mlls sel mfrjls illc{” %Kenbc" Df|bjilr" $Sfbbmfi" ?11<f".) Dr`m sen{ {sfrsnig q`nis" selcldninsnì `d wefs kì{sns|sl{ f tnrs|fb lislrqrn{lilsw`rj" ni bnslrfs|rl" tfrnl{ kì{nclrfob~)

Tnrs|fb Lislrqrn{l{8 F [qlknfbD`rm `d K``qlrfsntl [srfslg

Srfcnsnìfb lislrqrn{l{ kfi lislr nis` tfrn`|{d`rm{ `d k``qlrfsnì wnse`|s ilkl{{frnb~ l{sfo-bn{enig wefs n{ kfbblc f TLI) Kenbc ls fb) %?11<f.cl{krnol {nu rlf{ì{ we~ dnrm{ {llj s` l{sfobn{ek``qlrfsntl ilsw`rj{8 6. klrsfnis~ ‛ o~ cltlb`qnigrlbfsnì{enq{ wnse m|s|fb {`bncfrns~" ?. dblunonb-ns~ ‛ o~ olnig fobl s` v|nkjb~ fbb`kfsl f rfigl `d rl{`|rkl{" ;. kfqfkns~ ‛ o~ ‒`|s{`|rknig” w`rj s``selr ilsw`rj mlmolr{" 3. {qllc ‛ o~ olnig fobls` v|nkjb~ rl{qìc s` f wncl rfigl `d o|{nil{{ `q- q`rs|insnl{" <. {jnbb{ fic k`mqlslikl ‛ o~ gfninigfkkl{{ s` rl{`|rkl{ `selr sefi ìl„{ `wi" fic 4.nislbbnglikl ‛ o~ {efrnig mfrjls nid`rmfsnì)Qbfknig k``qlrfsntl ilsw`rj{ ì f {kfbl" g`nigdr`m niclqliclis s` nislgrfslc" Kenbc ls fb)" cl-{krnol dntl clgrll{ `d ilsw`rj{8 6. Lv|fb-Qfrsilr Ilsw`rj" ?. \inbfslrfb Fgrllmlis{" ;. C`mnifslc Ilsw`rj" 3. Tnrs|fb K`rq`rfsnì" fic <. [srfslgnkFbbnfikl) Sel tnrs|fb k`rq`rfsnì n{ cl{krnolc f{ ‒fb``{lb~ k`|qblc lislrqrn{l ni wenke sel qfrs{ frlelbc s`glselr ser`|ge sel mlcn|m `d {`qen{snkfslcnid`rmfsnì slkei`b`g~ qfkjfgl{”) Nislrl{snigb~"sel~ i`sl sefs sel tnrs|fb k`rq`rfsnì mf~ ol ‒fsrfi{nsnìfb {sfgl `d k`mqfi~ cltlb`qmlis ìsel qfse s` k`mqblsl enlrfrke~”" f {sfslmlis sefsn{ {`mlwefs kìsrfcnks`r~ s` I`bfi $ Kr`{ì%6>><." we` d`rl{fw ilsw`rj{ lmlrgnig f{ sel`rgfinxfsnìfb d`rm{ `d sel d|s|rl" rlqbfknig ficsrfi{d`rmnig sel srfcnsnìfb q~rfmnc-{efqlc en-lrfrkenkfb `rgfinxfsnì)

Sel K`iklqs `d Tnrs|fbLislrqrn{l{ ni sel Qf{s

Ni sel bfsl 6>51{ sel slrm ―tnrs|fb k`rq`rfsnì„ olgfi s` fqqlfr d`r sel dnr{s snml) Ni sel olgni-inig" ‒tnrs|fb” rldlrrlc s` nitn{nobl `r tnrs|fb bnij{ olswlli k`mqfinl{ ni sel d`rm `d nid`rmfsnì fick`mm|inkfsnì slkei`b`g~" fjf NKS `r k`mq|s-lr{) Tnrs|fb k`rq`rfsnì{ wlrl slkei`b`g~-crntlik`rq`rfsnì{" |{nig fic {efrnig sel {fml nid`rmf-snì {~{slm{8

Sel tnrs|fb k`rq`rfsn`i n{ f slmq`rfr~ ilsw`rj `d niclqliclis k`mqfinl{ ‛ {|qqbnlr{" k|{s`m

-

lr{" ltli lr{swenbl rntfb{ ‛ bnijlc o~ nid`rmfsn`islkei`b`g~ s` {efrl {jnbb{" k`{s{" fic fkkl{{ s``il fi`selr„{ mfrjls{ %O~ril" 6>>;.)

Cftnc`w fic Mfbìl %6>>;. cl{krnol tnrs|fbk`rq`rfsnì{ f{ olnig fobl s` fqqrlelic k|{s`mlr illc{ fic {qlkndnkfsnì{ fic krlfsl ilw qr`c|ks{ni{sfisfil`|{b~ `r ì-sel-db~" se|{ kì{sfisb~ rl-

;

F K`iklqs|fb Drfmlw`rj d`r _n{j fic T|bilrfonbns~ ni Tnrs|fb Lislrqrn{l Ilsw`rj{

nitlisnig selm{lbtl{ s` fkk`mm`cfsl `r rl{q`ics` sel mfrjls db|ks|fsn`i{8

S` sel `|s{ncl `o{lrtlr ns wnbb fqqlfr fbm`{s lc

-

glbl{{ wnse qlrmlfobl fic k`i{sfisb~ kefignig nislrdfkl{ olswlli k`mqfi~" {|qqbnlr fic k|{s`m

-

lr{ Z․] wnse srfcnsnìfb `ddnkl{" clqfrsmlis{ fic `qlrfsnig cntn{nì{ kì{sfisb~ rld`rmnig fkk`rc

-

nig s` illc) Hò rl{qì{nonbnsnl{ wnbb rlg|bfrb~ {ends" f{ wnbb bnil{ `d f|se`rns~) %Cftnc`w fic Mfbìl" 6>>;.)

G`rfi{ì %6>>;. cl{krnol{ f ‒tnrs|fb lislrqrn{l %TL.” f{ ‒f slmq`rfr~ fggrlgfsnì `d k`rlk`mqlsliknl{ fic f{{`knfslc rl{`|rkl{ k`bbfo`-rfsnig s` fccrl{{ f {qlkndnk {ns|fsnì" qrl{|mlcs` ol f o|{nil{{ `qq`rs|ins~”) G`rfi{ì g`l{ ìs` cl{krnol d`|r cnddlrlis jnic{ `d fggrlgfsnì{`r TL{8

Fi fggrlgfsn`i `d rm{ d`rmlc ni rl{q`i{l 

s` fi `qq`rs|ins~F qrl-lun{snig fggrlgfsn`i `d

k`rl k`mql-sliknl{ {lljnig ilw `qq`rs|insnl{Fi lun{snig {|qqbnlr kefni" rl{q`icnig s`

mfrjls illc{F onccnig

kì{`rsn|m `d kìtlisnìfb o|{nil{{l{ fksnig f{ ìlWefs sel{l jnic{ `d TL{ eftl ni k`mmì n{sefs sel~ frl fbb cl{ngilc d`r f klrsfni q|rq`{l`r klrsfni o|{nil{{ `qq`rs|ins~) Sel k`mmìcli`mnifs`r n{ sel lun{slikl `d f o|{nil{{`qq`rs|ins~ `d m|s|fb nislrl{s s` fbb qfrsnl{nit`btlc" `r f o|{nil{{ `qq`rs|ins~ sefs kfii`s ol rlfbnxlc wnse`|s d`rmnig {fnc fggrlgfsnì{)Ni {`ml kf{l{ sel k`bbfo`rfsnì wnbb lic welisel o|{nil{{ `qq`rs|ins~ ef{ olli d|bdnbblc" ni`selr kf{l{ ns wnbb kìsni|l)Cntlrgnig dr`m G`rfi{ì %6>>;." Onkje`dd ls fb) %?11;. clqnks f cnddlrlis {ls `d d`|r of{nks~ql{ `d tnrs|fb k`rq`rfsnì{" fbb {srìgb~ bnijlc o~ NKS ni `rclr s` d|bdnbb selnr o|{nil{{ g`fb{86. f k``qlrfsnì fmìg qfrsilr{" g`tlrilc o~ fklisrfb k`rq`rfsnì" wnse f klisrfbnxlc enlrfrken-kfb {sr|ks|rl" ?. f k``qlrfsnì fmìg qfrsilr{"g`tlrilc o~ f ìl k`rq`rfsnì `ddlrnig klisrfb{lrtnkl{ s` ns{ qfrsilr{" o|s wnse sel {fml lv|fbrnges{ f{ sel `selr qfrsilr{" ;. f tnrs|fb k`rq`rfsnìwnse fi niclqliclis k``rcnifs`r" f {` kfbblc

senrc qfrs~ ni{sns|sn`i

`ddlrnig klisrfb {lrtnkl{" fic 3.f tnrs|fb k`rq`rfsnì wnse f k`mmì k``rcnif-snì `d fbb qfrsilr{" sel nclfbn{snk s~ql `d f tnrs|fbk`rq`rfsnì wnse i` klisrfb kìsr`b)Wenbl G`rfi{ì %6>>;. n{ kìklrilc wnsesel q|rq`{l `d f TLI fic cnddlrlisnfsl{ selmfkk`rcnigb~" Onkje`dd ls fb) %?11;. {llm{ m`rlkìklrilc wnse

mfifglmlis

fic

{sr|ks|r

l" {nmnbfr s` sel cldninsn`i `d f c~ifmnk ilsw`rj ni [i`w lsfb) %6>>?.) Sen{ cn{sniksn`i wnbb olk`ml nmq`rsfisbfslr ni sen{ kefqslr)

Sel K`iklqs `d Tnrs|fbLislrqrn{l{ S`cf

Fbse`|ge cldninsnì{ fic cl{krnqsnì{ `d tnrs|fblislrqrn{l{ tfr~" f{ i`slc o~ K|ief $ Q|sinj"%?114." sel nisli{ntl |{l `d NKS n{ f k`mmìdlfs|rl sefs g`l{ d|rselr sefi `selr dlfs|rl{ nimfjnig f tnrs|fb lislrqrn{l cnddlrlis dr`m f m`rlsrfcnsnìfb k``qlrfsnì olswlli lislrqrn{l{) F{Kenbc" Df|bjilr $ Sfbbmfi %?11<f. q|s ns"

Sel tnrs|fb k`rq`rfsnì Z․] qbfkl{ ns{ lmqef{n{i`s qrnmfrnb~ ì e`w sw` `r m`rl dnrm{ kfi w`rj s`glselr s` selnr m|s|fb fctfisfgl" o|s ì e`wìl dnrm kfi ol krlfslc wnse dblunobl o`|icfrnl{fic `wilr{enq fnclc o~ sel dfknbnsnl{ qr`tnclc o~ lblksrìnk cfsf lukefigl fic k`mm|inkfsnì%Kenbc ls fb)" ?11<f.)

Se`mq{ì %?115f. lmqb`~{ f qlrefq{ m`rlglilrfbnxlc tnlw" welrl el {ll{ sel TLI f{ f o|{n-il{{ s``b sefs kfi kìilks nicntnc|fb lislrqrn{l{nis` qllr ilsw`rj{ welrl fqqr`qrnfsl k`bbfo`rf-snì qrfksnkl{ fic slkei`b`gnl{ lifobl selm s` eftlsel {fml kfqfonbnsnl{ fic k`mqlsnsntl fctfisfglf{ bfrgl k`rq`rfsnì{" fic en{ cldninsnì wnbb ol