An Enterprise Security Management System as an ASP Solution

Advances in Internet technologies have enabled not only large corporations but also small/medium businesses to utilize the Internet for their businesses. While enterprises can be more competitive with such high-tech tools, they are now inevitably exposed to various security risks and threats. In order to protect their information assets, large corporations purchase and operate enterprise security management systems which provide enterprise-level integrated security. However, they are so expensive that small/medium businesses can hardly afford to utilize one. We hold that one way of providing integrated security to small/medium businesses in a costeffective manner is by means of an ASP solution. In this paper, we justify our proposition by analyzing the market trends for ASP in conjunction with security management software. We also propose a web-based security management system that can be used as an ASP solution. To the best of our knowledge, it is the first such system and is currently running as a commercial solution at a Korean ASP which provides services to 3,000 small/medium businesses.