The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals

2015 ◽  
pp. 98-114 ◽  
Author(s):  
Martina de Gramatica ◽  
Katsiaryna Labunets ◽  
Fabio Massacci ◽  
Federica Paci ◽  
Alessandra Tedeschi
Keyword(s):  
Risk Assessment ◽  
Empirical Study ◽  
Security Risk ◽  
Security Controls ◽  
Security Risk Assessment

scholarly journals A Scenario-Based Methodology for Cloud Computing Security Risk Assessment

2017 ◽  
Vol 5 (12) ◽  
pp. 127-155
Author(s):  
Ishraga Mohamed Ahmed Khogali ◽  
Hany Ammar
Keyword(s):  
Risk Factors ◽  
Risk Assessment ◽  
Cloud Computing ◽  
Significant Risk ◽  
Security Risk ◽  
Management Framework ◽  
Security Controls ◽  
Risk Management Framework ◽  
Dynamic Scenario ◽  
Security Risk Assessment

Cloud computing has been one of the major emerging technologies in recent years.  However, for cloud computing, the risk assessment becomes more complex since there are several issues that likely emerged. In this paper, we survey the existing work on assessing security risks in cloud computing applications. Existing work does not address the dynamic nature of cloud applications and there is a need for methods that calculate the security risk factor dynamically. In this paper, we use the National Institute of Standards and Technology (NIST) Risk Management Framework and present a dynamic scenario-based methodology for risk assessment. The methodology is based using Bayesian networks to estimate the likelihood of cloud application security failure which enables us to compute the probability distribution of failures over variables of interest given the evidence.  We illustrate the methodology using two case studies and highlight the significant risk factors.  We also show the effect of using security controls in reducing the risk factors.

Defense Transportation's EDI Program: A Security Risk Assessment

1993 ◽  
Author(s):  
Harold L. Frohman ◽  
William R. Ledder
Keyword(s):  
Risk Assessment ◽  
Security Risk ◽  
Security Risk Assessment
Sign in / Sign up

Export Citation Format

Share Document