Research the information security risk assessment technique based on Bayesian network

Wang, Lijian; Wang, Bin; Yongjun, Peng

doi:10.1109/icacte.2010.5579740

Cited by 11 publications

(4 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A security risk analysis model for information systems: Causal relationships of risk factors and vulnerability propagation analysis [70]. The authors present a security risk analysis model with the objective of identifying the causal relationships between risk factors and analysing the complexity and uncertainty of the propagation of vulnerabilities.…”

Section: Model 3 (Mo3)mentioning

confidence: 99%

Towards an integrated risk analysis security framework according to a systematic analysis of existing proposals

Santos-Olmo,

Sánchez,

Rosado

et al. 2023

Front. Comput. Sci.

View full text Add to dashboard Cite

The information society depends increasingly on risk assessment and management systems as means to adequately protect its key information assets. The availability of these systems is now vital for the protection and evolution of companies. However, several factors have led to an increasing need for more accurate risk analysis approaches. These are: the speed at which technologies evolve, their global impact and the growing requirement for companies to collaborate. Risk analysis processes must consequently adapt to these new circumstances and new technological paradigms. The objective of this paper is, therefore, to present the results of an exhaustive analysis of the techniques and methods offered by the scientific community with the aim of identifying their main weaknesses and providing a new risk assessment and management process. This analysis was carried out using the systematic review protocol and found that these proposals do not fully meet these new needs. The paper also presents a summary of MARISMA, the risk analysis and management framework designed by our research group. The basis of our framework is the main existing risk standards and proposals, and it seeks to address the weaknesses found in these proposals. MARISMA is in a process of continuous improvement, as is being applied by customers in several European and American countries. It consists of a risk data management module, a methodology for its systematic application and a tool that automates the process.

show abstract

Section: Model 3 (Mo3)mentioning

confidence: 99%

Towards an integrated risk analysis security framework according to a systematic analysis of existing proposals

Santos-Olmo,

Sánchez,

Rosado

et al. 2023

Front. Comput. Sci.

View full text Add to dashboard Cite

show abstract

“…A multilayered hierarchical Bayesian network method was used in [13] to measure mobile phone security by describing risk communications and potential risk mining. However, this method describes only the connections between mobile applications and does not extend to the entire network, as proposed in [14]- [17] for Bayesian network-associated risk events.…”

Section: Related Workmentioning

confidence: 99%

A Method for Calculating Network System Security Risk Based on a Lie Group

et al. 2019

View full text Add to dashboard Cite

Traditionally, network risk assessment uses a statistical computation method. This paper proposes Lie group kinematics to describe the feature space of the attack behavior. A matrix composed of indicators and topologies in a network system is mapped to a Lie group. The attack behavior path and the powers of the attack and defense are defined. The risk value of the attack and defense is calculated from the change in the indicators. Then, we evaluate the network security risk status using calculus. To examine the validity of the network risk assessment based on a Lie group, we conduct one experiment and utilize the CIC2017 dataset to show the applicability and efficiency of the proposed method. The experimental results show the effectiveness of the calculation method based on a Lie group, and the risk value of the attack and defense is valid compared to those of other machine learning algorithms. The calculation method based on a Lie group can quantitatively analyze network security risks.INDEX TERMS Lie group, utility function, risk assessment, attack and defense.

show abstract

“…In the past, university finance information system was a traditional hand university financial system; now, which have been ported to computer systems and the internet, computer statistics, analysis, and management of university's financial data. It greatly improves the automation of financial personnel in universities [2][3][4].…”

Section: Introductionmentioning

confidence: 99%

Safe and Efficient System Design of University Financial Information System

Xing

2014

AMR

View full text Add to dashboard Cite

The establishment of security and overall system protection system in financial of university information system is currently facing important issues. This paper uses the financial of university information system of Beijing as background. The aim is to protect against overall system levels within the net for targets. The security and overall system protection system can enhance the security of a level and ensure financial of university information system in a secure and stable network environment and effective operation.

show abstract

Research the information security risk assessment technique based on Bayesian network

Cited by 11 publications

References 13 publications

Towards an integrated risk analysis security framework according to a systematic analysis of existing proposals

Towards an integrated risk analysis security framework according to a systematic analysis of existing proposals

A Method for Calculating Network System Security Risk Based on a Lie Group

Safe and Efficient System Design of University Financial Information System

Contact Info

Product

Resources

About