Decision support for Cybersecurity risk planning

Rees, Loren Paul; Deane, Jason K.; Rakes, Terry R.; Baker, Wade

doi:10.1016/j.dss.2011.02.013

Cited by 100 publications

(39 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Another option to treat uncertainty is fuzzy set theory which Rees et al (2011) used in a recent study to develop a decision support system addressing uncertain threat rates, impacts on assets, and countermeasure costs. To achieve this, all approaches require extensive input data like threat probabilities, incident costs, countermeasure costs, countermeasure success probabilities, etc.…”

Section: Related Workmentioning

confidence: 99%

Optimal selection of IT security safeguards from an existing knowledge base

Schilling

Werners

2016

European Journal of Operational Research

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

Optimal selection of IT security safeguards from an existing knowledge base

Schilling

Werners

2016

European Journal of Operational Research

View full text Add to dashboard Cite

“…Event Study(ES) methodology has been used determine the stock market impact of a cyber breach [29,30]. [20] VAR (2008) [19] Smith Lim Approach (1984) [17] LRAM (1987) [16,17] SPAN (1990) [16,17] Copula aided BBN (2006) [21] Cognitive Fuzzy Logic(2000) [22] Hidden Markov Model (2006) Fuzzy AHP (2009) ANN for phishing (2011) [27] Fuzzy sets & GA (2011) [26] Gametheoretic approach (2004) [18] Parker's Computer Security program (1981) [16,17] CRAMM (1991) [16,17] CORAS (2002) [16,17] OCTAVE (2003) [16,17] ISRAM (2005) [16,17] RISKPAC (1988) [16,17] Gompertz Diffusion Model (2003) [11] GLM(Logit) (2009) [16] …”

Section: Techniques For Is Risk Assessmentmentioning

confidence: 99%

i-HOPE Framework for Predicting Cyber Breaches: A Logit Approach

Das

Mukhopadhyay

Shukla

2013

2013 46th Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

In light of the recent surge in cyber security breaches globally, Information Security Management Systems (ISMS) for organizations is of utmost importance. In this paper, we used the CSI-FBI survey questionnaires from 1997 to 2010 and ISO/IEC27001 standard to propose an i-HOPE framework to predict the likelihood of a cyber breach. Generalized Linear Model i.e. Logit approach and CSI-FBI questionnaire data was used to compute and validate our proposed model. Using our i-HOPE framework we conclude that (i) specific security technologies (Firewalls, IDSs, Biometrics, firewalls), can deter only specific types of attacks (ii) reporting of cyber breaches to law enforcing bodies does not deter cyber attacks (iii) increase in percentage of (a) IT budget allocated to security and (b) outsourcing of IT security function decreases the likelihood of an attack.

show abstract

“…there are estimated the possible risks indicators for the some future time interval, for examp le, based on the methods of the time series extrapolation, auto-regression, and the others [25], [26]. In order to perform the risk pred iction, the special mode ls are used, which describe the prospective state of DCS based on an analysis of its behavior during operations in the previous time intervals [26].…”

Section: Methods For T He Effects Predicting Of T He Dangerous Acmentioning

confidence: 99%

Analytical Assessment of Security Level of Distributed and Scalable Computer Systems

Hu¹,

Mukhin²,

Kornaga³

et al. 2016

IJISA

View full text Add to dashboard Cite

Abstract-The article deals with the issues of the security of distributed and scalable computer systems based on the risk-based approach. The main existing methods for predicting the consequences of the dangerous actions of the intrusion agents are described. There is shown a generalized structural scheme of job manager in the context of a risk-based approach. Suggested analytical assessments for the security risk level in the distributed computer systems allow performing the critical t ime values forecast for the situation analysis and decisionmaking for the current configuration o f a distributed computer system. These assessments are based on the number of used nodes and data links channels, the number of act ive security and monitoring mechanisms at the current period, as well as on the intensity of the security threats realization and on the activation intensity of the intrusion prevention mechanis ms. The proposed comprehensive analytical risks assessments allow analyzing the dynamics of intrusions processes, the dynamics of the security level recovery and the corresponding dynamics of the risks level in the distributed computer system. Index Terms-Distributed computer systems, Security analysis, Risk-based approach. NOMENCLATURE α -the average intensity of the security threats for the distributed computer systems resources x1 and x2; β -the average intensity of the security mechanis ms from the group x3 and x4 activation; R 0 -the initial security risk; R(t) -security risks in the distributed computer systems, changing at time t;x 1 -the number of nodes in the distributed computer system;x 2 -the number of data link channels;x 3 -the number of the active security mechanisms; x 4 -the number of the security monitoring tools in the distributed computer systems;x 1max -the maximu m nodes number in a distributed computer system; x 2max -the maximu m number of data link channels; x 3max -the maximu m nu mber of the active security mechanisms;x 4max -the maximu m nu mber o f the security monitoring tools in the distributed computer systems.

show abstract

Decision support for Cybersecurity risk planning

Cited by 100 publications

References 16 publications

Optimal selection of IT security safeguards from an existing knowledge base

Optimal selection of IT security safeguards from an existing knowledge base

i-HOPE Framework for Predicting Cyber Breaches: A Logit Approach

Analytical Assessment of Security Level of Distributed and Scalable Computer Systems

Contact Info

Product

Resources

About