Electronic and Cyber Defense

Electronic and Cyber Defense

Detection and ranking of effective parameters in security evaluation of data center (Case study of the FAVA organization Rasht municipality

Document Type : Original Article

Authors
Zahra Barzegar Moghaddam 1
asadollah shahbahrami 2
1 Master's degree, Guilan University, Rasht, Iran
2 Professor at Guilan University, Rasht, Iran
Abstract
Because of gathering essential requirement for maintenance, reparation and technical support, data centers are an appropriate solution for reducing information technology cost and responsiveness to customer requirements. the data center structure must be designed and implemented in such a way that it always supplies the three essential principles of security, namely confidentiality, availability and integrity. Due to the complexity of these centers, for designing principles and supply the security, variant national documents and international standards had been prepared. In this research, by revising existence standards, effective parameters in security had been exploited in three forms of physical infrastructure security, IT infrastructure security and management issues, which can be used in the assessment security of data center. In a case study, by preparing a questionnaire, data center experts and information technology experts were asked to prioritize the parameters. Result of examinations which implemented with FAHP show that information technology infrastructure security with close weight to one is on priority, and physical infrastructure security is in the next rank. Between information technology infrastructure sub-metrics, storing and backup with 0.52 relative weight is in the first, management and information technology infrastructure monitoring with 0.28 relative weight is in the second, processing requirements with 0.20 relative weight is in the third and the rest of metrics are important in the fourth priority. And also, between physical infrastructure sub-metrics, fire protection with 0.78 relative weight is in the first, power and ground connection with 0.22 relative weight is in the second and the rest of all are important in the third priority.
Keywords
Data Center
Security evaluation
FAHP
Subjects

Smiley face

 

1]   A. Shameli-Sendi, R. Aghababaei-Barzegar, and M. Cheriet, “Taxonomy of information security risk assessment (ISRA),” Computers & Security, vol. 57, pp. 14–30, Mar. 2016,         https://doi.org/10.1016/j.cose.2015.11.001
[2]   B. Zahedi Barouq and M.J. Babaei, "Schools, Methodology, Design, Management and Maintenance of Data Centers", first edition, Tehran, Hadaf Novin Publications, 2018.(In Persian)
[3]  Passive defense in the design of data centers, Research Institute of Strategic Studies and National Security, 2009.(In Persian (
[4] Requirements for data centers, Information Technology Organization of Iran, Frist edition, 2014.(In Persian (
[5] A. Shah Bahrami and R. Rafiezadeh Kasani, "Security of Information Technology Resources", first edition, Tehran, Jihad University Press, 2015.(In Persian (
[6]   Requirements for creating data centers(DC100 standard), Iran Information Technology Organization, December 2014.(In Persian (
[7]   M. V. M. Lima, R. M. F. Lima and F. A. A. Lins, "A multi-perspective methodology for evaluating the security maturity of data centers," 2017 IEEE International Conference on Systems, Man, and Cybernetics (SMC), Banff, AB, Canada, 2017, pp. 1196-1201, doi: 10.1109/SMC.2017.8122775.
 
[8] Z. Roknabadi, “An approach to apply security in physical access to data centers based on RFID technology”, M. Sc thesis, Payam Noor University, Tehran, 2012.(In Persian (
[9]   S. Janou Sepah, N. Modiri, M. Malakouti and A. Pahlavan Tafti, “Investigating the effects of implementing a multi-layer model to integrate physical and logical access in the data center of Islamic Azad University, Majlesi branch," the third conference of electrical and electronics engineering in Iran, 2011, https://civilica.com/doc/125348.(In Persian (
[10]  R. Torkashvand, S. Rahmati Asl and M. Taher Abadi, “Providing a modular support structure for the design of national data centers in Iran,” International Conference on Nonlinear Systems and Optimization of Electrical and Computer Engineering, ,2015, https://civilica.com/doc/383364..)In Persian (
[11] H. Qaraei and M. Aqa Moheidin, 2014, "Improving the ranking of information security risks using multi-criteria decision models", Signal and Data Processing Quarterly, Vol 11, Number 2, pp. 3-14 March 2013, http://jsdp.rcisp.ac.ir/article-1-161-fa.html.(In Persian (
 [12] H. Sepehrzadeh, “A method for quantitative evaluation of security risk in cyber-physical systems”, Scientific Journal of Electronical & Cyber Defence, Vol. 11, No. 2, 2023, https://dorl.net/dor/20.1001.1.23224347.1402.11.2.6.9. (in Persian)
[13] R. Gao, S. Jing, M. Li, Y. Sun, G. Si and Y. Zhang, “Research on health evaluation method of data center security protection system”, Proc. SPIE 13175, International Conference on Computer Network Security and Software Engineering, 2024, https://doi.org/10.1117/12.3032059
[14] A. Habibi and S. Afaridi, "Multi-criteria decision-making models (deterministic and fuzzy)", first edition, Tehran, Narvan publications, 2022.(In Persian(
Electronic and Cyber Defense
Volume 13, Issue 3 - Serial Number 51
Autumn
Autumn 2025
Pages 51-70

  • Receive Date 17 June 2025
  • Revise Date 31 July 2025
  • Accept Date 09 September 2025
  • Publish Date 23 October 2025