scholarly journals Educational Model for Evaluation of Airport NIS Security for Safe and Sustainable Air Transport

2020 ◽  
Vol 12 (16) ◽  
pp. 6352 ◽  
Author(s):  
Miroslav Kelemen ◽  
Volodymyr Polishchuk ◽  
Beáta Gavurová ◽  
Rudolf Andoga ◽  
Stanislav Szabo ◽  
...  
Keyword(s):  
Risk Assessment ◽  
Information Systems ◽  
Information And Communication Technologies ◽  
Traffic Control ◽  
Air Transport ◽  
Air Cargo ◽  
Security Risk ◽  
Financial Loss ◽  
Aviation Education ◽  
Low Degree

One of the praxeological problems of safe and sustainable air transport (airfreight transport/air cargo, and air passenger transport) is the prevention and management of risks by competent staff, with the support of modern information and communication technologies. This paper presents an educational information model and software for the airport network and information systems risk assessment, primarily intended for aviation education and training of professionals for ensuring safe and sustainable air transport. The solution to the problem is based on the application of the fuzzy logic method in the air transport environment. Based on a fuzzy expert model, the selected scenario, and the input data established separately for airport assets by a group of 23 experts from aviation practice and a university, the following three assessments of airport network information system assets were constructed: Asset A2 (meteorological information systems) has an insignificant risk with an estimated 0.1162, and assets A1 (air traffic control and management (ATM), navigational aids and approach) and A3 (runway monitoring system) received a low risk of airport network and information systems (NIS) security with ratings of 0.2623 and 0.2915, respectively. An airport NIS risk assessment was aggregated (0.2288), indicating a low degree of security risk to the airport’s network and information systems. The aggregated risk assessment of airport NIS, including financial loss data, was calculated as 0.1438, representing a low degree of security risk to the airport’s network and information systems. Scenarios for evaluating airport assets are changing for students during education. The results of the developed model and its software will be part of the Simulation Center of the Faculty of Aeronautics.

Risk Assessment of Multi-Order Dependencies between Critical Information and Communication Infrastructures

2013 ◽  
pp. 153-172 ◽  
Author(s):  
Panayiotis Kotzanikolaou ◽  
Marianthi Theoharidou ◽  
Dimitris Gritzalis
Keyword(s):  
Risk Assessment ◽  
Information Systems ◽  
Basic Characteristic ◽  
Critical Infrastructures ◽  
Security Risk ◽  
Current Information ◽  
Information And Communication ◽  
Information Security Risk ◽  
Basic Concepts ◽  
Security Risk Assessment

Assessing risk in information and communication infrastructures is a challenging topic due to the complexity of critical infrastructures (CIs) and of the various dependencies between such infrastructures. This chapter discusses the basic concepts of risk assessment for CIs. Moreover, it describes a recently proposed methodology for criticality assessment. The main goal of this methodology is to assess the risk of an infrastructure (or a sector of critical infrastructures), taking into account the dependencies between CIs and/or sectors. The methodology is compatible with current information systems practices. The basic characteristic of the presented methodology is that it attempts to capture both organization-oriented and society-oriented consequences of possible security events, a feature which is not always embedded in mainstream information security risk assessment methodologies.

scholarly journals Integrated adaptive system of security risk assessment for information systems resources

2016 ◽  
Vol 22 (3) ◽  
Author(s):  
Светлана Владимировна Казмирчук ◽  
Андрей Юрьевич Гололобов ◽  
Марина Сергеевна Мовчан ◽  
Людмила Павловна Рыбалка
Keyword(s):  
Risk Assessment ◽  
Information Systems ◽  
Adaptive System ◽  
Security Risk ◽  
Security Risk Assessment

scholarly journals Research based on tools investigation of security risk assessment according to the information systems resources

2017 ◽  
Vol 19 (1) ◽  
Author(s):  
Филипп Александрович Приставка ◽  
Петр Николаевич Павленко ◽  
Светлана Владимировна Казмирчук ◽  
Марина Вячеславовна Коломиец
Keyword(s):  
Risk Assessment ◽  
Information Systems ◽  
Security Risk ◽  
Security Risk Assessment

Information Security Risk Assessment on Complex Information System

2013 ◽  
Vol 765-767 ◽  
pp. 1481-1485
Author(s):  
Chang Lun Zhang ◽  
Chao Li
Keyword(s):  
Complex System ◽  
Risk Assessment ◽  
Information Systems ◽  
Assessment Method ◽  
Security Risk ◽  
Full Account ◽  
Complex Information ◽  
Risk Assessment Method ◽  
Depth Analysis ◽  
Security Risk Assessment

Risk assessment is the key and core technologies ensuring IT system security. Based on the comprehensive analysis to complex information systems, this paper first summarizes the typical characters of complex information systems and then gives new risk factors that complex system need to face. Furthermore, a new risk assessment method is proposed to evaluate the complex information systems. The method takes full account of the effect of complexity of complex information systems in each process of risk assessment, and utilizes multi-level risk views to carry out in-depth analysis to the risk of complex system.

scholarly journals Method of Information Security Risk Assessment Based on Improved Fuzzy Theory of Evidence

2018 ◽  
Vol 14 (03) ◽  
pp. 188 ◽  
Author(s):  
Xuepeng Huang ◽  
Wei Xu
Keyword(s):  
Risk Assessment ◽  
Information Systems ◽  
Information Security ◽  
Fuzzy Sets ◽  
Fuzzy Theory ◽  
Security Risk ◽  
Basic Probability ◽  
Information Security Risk ◽  
Security Risk Assessment ◽  
Theory Of Evidence

<p>A method based on improved fuzzy theory of evidence was presented to solve the problem that there exist all kinds of uncertainty in the process of information security risk assessment. The hierarchy model for the information systems risk assessment was established firstly, and then fuzzy sets were introduced into theory of evidence. The basic probability assignments were constructed using the membership function of fuzzy sets, and the basic probability assignments were determined. Moreover, weight coefficients were calculated using entropy weight and empirical factor, which combined the objective weights with the subjective ones, and improved the validity and reliability. An illustration example indicates that the method is feasible and effective, and provides reasonable data for constituting the risk control strategy of the information systems security.</p>

Sign in / Sign up

Export Citation Format

Share Document