Abstract
Information security is a crucial technique for an organization to survive in these days. However, there is no integrated model to assess the security risk quantitatively and optimize its resources to protect organization information and assets effectively. In this paper, an integrated, quantitative risk analysis model is proposed including asset, threat and vulnerability evaluations by adapting software risk management techniques. It is expected to analyze security risk effectively and optimize resources to mitigate the risk.
| Original language | English |
|---|---|
| Title of host publication | Lecture Notes in Artificial Intelligence (Subseries of Lecture Notes in Computer Science) |
| Editors | D.-K. Baik |
| Pages | 505-513 |
| Number of pages | 9 |
| Volume | 3398 |
| Publication status | Published - 2005 |
| Event | Third Asian Simulation Conference, Asiasim 2004 - Jeju Island, Korea, Republic of Duration: 2004 Oct 4 → 2004 Oct 6 |
Other
| Other | Third Asian Simulation Conference, Asiasim 2004 |
|---|---|
| Country | Korea, Republic of |
| City | Jeju Island |
| Period | 04/10/4 → 04/10/6 |
Fingerprint
ASJC Scopus subject areas
- Hardware and Architecture
Cite this
A security risk analysis model for information systems. / In, Hoh; Kim, Young Gab; Lee, Taek; Moon, Chang Joo; Jung, Yoonjung; Kim, Injung.
Lecture Notes in Artificial Intelligence (Subseries of Lecture Notes in Computer Science). ed. / D.-K. Baik. Vol. 3398 2005. p. 505-513.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
}
TY - GEN
T1 - A security risk analysis model for information systems
AU - In, Hoh
AU - Kim, Young Gab
AU - Lee, Taek
AU - Moon, Chang Joo
AU - Jung, Yoonjung
AU - Kim, Injung
PY - 2005
Y1 - 2005
N2 - Information security is a crucial technique for an organization to survive in these days. However, there is no integrated model to assess the security risk quantitatively and optimize its resources to protect organization information and assets effectively. In this paper, an integrated, quantitative risk analysis model is proposed including asset, threat and vulnerability evaluations by adapting software risk management techniques. It is expected to analyze security risk effectively and optimize resources to mitigate the risk.
AB - Information security is a crucial technique for an organization to survive in these days. However, there is no integrated model to assess the security risk quantitatively and optimize its resources to protect organization information and assets effectively. In this paper, an integrated, quantitative risk analysis model is proposed including asset, threat and vulnerability evaluations by adapting software risk management techniques. It is expected to analyze security risk effectively and optimize resources to mitigate the risk.
UR - http://www.scopus.com/inward/record.url?scp=26844539351&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=26844539351&partnerID=8YFLogxK
M3 - Conference contribution
AN - SCOPUS:26844539351
VL - 3398
SP - 505
EP - 513
BT - Lecture Notes in Artificial Intelligence (Subseries of Lecture Notes in Computer Science)
A2 - Baik, D.-K.
ER -