شناسایی کدهای‌مدیریتی چارچوب‌جامع امنیت‌سایبری مرکز‌داده بر اساس الگویnist با رویکرد یکپارچه و هوشمند

بسیاری از سازمان‌ها به منظور تسهیل فرآیندها و ارائه خدمات نو‌آورانه، توجه ویژه‌ای به استفاده از خدمات مرکز‌داده جهت میزبانی از  سکوها، خدمات و ابزارهای نوین برای مدیریت و راهبری  سامانه‌های خود نشان می‌دهند. در حوزه امنیت‌سایبری مرکز‌داده، برای شناخت علل تهدیدات سایبری و سپس حل مسائل نیاز است، تمام جوانب درنظر گرفته شوند. بنابراین ما در این پژوهش بدنبال شناسایی و ارائه کدهای‌مدیریتی هستیم که در آن تمامی جوانب درونی و بیرونی امنیت‌سایبری در نظر گرفته شود. در این پژوهش با الگو‌گیری از چارچوب کلی امنیت سایبریnist  و چارچوب بسط داده شده موجود، نسبت به شناسایی جامع کدهای تامین امنیت و حفاظت از زیر ساخت‌ اصلی مرکز‌داده، اقدام نمودیم تا ضمن اتخاذ راهبرد یکپارچه، هوشمندی لازم با اشتراک اطلاعات و یادگیری از حملات قبلی در سازمانها جهت بهبود فرایند پاسخ و بازیابی ایجادگردد. در این پژوهش بمنظور شناسایی و ارائه کدهای‌مدیریتی چارچوب‌جامع امنیت‌سایبری مرکز‌داده با روش مرور نظام‌مند از طریق جستجو در پایگاه وب او ساینس و اسکپوس و مقالات داخلی تعداد 1831 سند استخراج شد که پس از بررسی‌های لازم 63 مورد از آن‌ها به‌عنوان اسناد مرتبط شناسایی و با استفاده از روش فراترکیب، بررسی و کدگذاری شدند و کدهای استخراج شده در ذیل 5 مقوله اصلی (برگرفته از الگوی nist)، 23 مولفه و 108 کد مدیریتی قرار گرفتند که مربوط به امنیت‌سایبری مرکز‌داده یعنی شناسایی، محافظت، کشف، پاسخگویی و بازیابی بودند.

identify management codes of comprehensive framework for data center cybersecurity based on the nist model with an integrated and intelligent approach

in order to facilitate processes and provide innovative services, most of organizations pay special attention to using data center services to host new platforms, services and tools to manage and run their systems. in the field of data center cybersecurity, all aspects need to be considered to identify the causes and then solve the problems. therefore, in this study, we seek to identify and provide management codes that consider all internal and external aspects of cyber security.in this research, using nist cybersecurity framework and existing localized framework for identify management codes of comprehensive framework for data center cybersecurity by systematic literature review (slr), 1831 documents was extracted by searching the science direct, scopus and isc articles. after necessary examinations, 63 of them were identified as related documents. they were analyzed and coded using the meta- synthesis method. finally, the extracted features were classified into 5 main category and 23 sub categories and 108 codes, which were related to data center cyber security, i.e. identification, protection, detection, response and retrieval.introduction in recent years, the volume of data has increased to such an extent that the 21st century is known as the data century (calzada almirall, 2020). however, this increase in the volume of data and the need to ensure the security of the production and maintenance center and data services have been raised as an emerging issue in the management of information systems. utilization of the data center, which is considered as the most important vital infrastructure of the organization, and huge investment has been made and the existential importance of these centers in providing the information and services needed by the society, causes an increase in cyber threats against them and increases the motivation of the threat actors to endanger the security of these centers. (kazemi et al., 2022). the researcher’s main approach is to identify and present data center cyber security management codes with an integrated and intelligent approach.problem statementidentify management codes of comprehensive framework for data center ‌ cybersecurity based on the nist model with an integrated and intelligent approach.the review of internal research in the field of cyber security also shows that no research has been conducted that has examined the security of the organizational data center separately. adopting this point of view, which includes all the dimensions and components, and the codes affecting the cyber security of the data center, can be a useful approach in this regard.materials and methods the current research method is qualitative and meta- synthesis method. in this research, in order to review data center cyber security literature, sandelowski and barroso’s seven-step model has been used (sandelowski barroso, 2006).research findings by systematically reviewing data center cyber security literature and coding and analyzing them, the main categories and components of this framework were identified. in total, the results of coding the sources led to the identification of the components of the framework and its dimensions. based on the investigations, a total of 108 management codes were classified in the form of 23 components and extracted as components of the intelligent and integrated cyber security framework of the data center, which were identified in the 5 main categories of identification, protection, discovery, response and recovery.conclusion in this research, using nist cybersecurity framework and existing localized framework for identify management codes of comprehensive framework for data center cybersecurity by systematic literature review (slr), 1831 documents was extracted by searching the science direct, scopus and isc articles.