Security Risk Assessment and Electronic Commerce

2011 ◽  
pp. 2-23
Author(s):  
Jonathan W. Palmer ◽  
Jamie Kliewer ◽  
Mark Sweat
Keyword(s):  
Risk Assessment ◽  
Electronic Commerce ◽  
Security Risk ◽  
Security Issue ◽  
Management Objectives ◽  
Fortune 1000 ◽  
Response Team ◽  
Security Risk Assessment ◽  
The Individual ◽  
Financial Losses

The security issue has been a compelling one for many organizations. In two separate studies completed in April 1998, Fortune 1000 companies reported more financial losses due to computer vandalism and espionage in 1997 than they ever experienced before. Several corporations said they lost $10 million or more in a single break-in. And reports of system break-ins at the Computer Emergency Response Team site are the highest they’ve ever been. Management objectives for security reflect the individual organization’s situation. However, there are several common themes in the objectives for security: • Safeguarding the organization’s assets and resources. • Complying with policies, procedures, laws, and regulations. • Utilizing resources economically and efficiently. • Ensuring the reliability and integrity of information.

scholarly journals A new lightweight method for security risk assessment based on fuzzy cognitive maps

2014 ◽  
Vol 24 (1) ◽  
pp. 213-225 ◽  
Author(s):  
Piotr Szwed ◽  
Paweł Skrzyński
Keyword(s):  
Risk Assessment ◽  
Data Storage ◽  
Low Cost ◽  
Cognitive Maps ◽  
Assessment Method ◽  
Lessons Learned ◽  
Fuzzy Cognitive Maps ◽  
Software Systems ◽  
Security Risk ◽  
Security Risk Assessment

Abstract For contemporary software systems, security is considered to be a key quality factor and the analysis of IT security risk becomes an indispensable stage during software deployment. However, performing risk assessment according to methodologies and standards issued for the public sector or large institutions can be too costly and time consuming. Current business practice tends to circumvent risk assessment by defining sets of standard safeguards and applying them to all developed systems. This leads to a substantial gap: threats are not re-evaluated for particular systems and the selection of security functions is not based on risk models. This paper discusses a new lightweight risk assessment method aimed at filling this gap. In this proposal, Fuzzy Cognitive Maps (FCMs) are used to capture dependencies between assets, and FCM-based reasoning is performed to calculate risks. An application of the method is studied using an example of an e-health system providing remote telemonitoring, data storage and teleconsultation services. Lessons learned indicate that the proposed method is an efficient and low-cost approach, giving instantaneous feedback and enabling reasoning on the effectiveness of the security system.

Sign in / Sign up

Export Citation Format

Share Document