A Bayesian networks-based security risk analysis model for information systems integrating the observed cases with expert experience

2012 ◽  
Vol 7 (10) ◽  
Author(s):  
Nan Feng
Keyword(s):  
Information Systems ◽  
Risk Analysis ◽  
Bayesian Networks ◽  
Security Risk ◽  
Analysis Model

A Security Risk Analysis Model for Information Systems

2005 ◽  
pp. 505-513 ◽  
Author(s):  
Hoh Peter In ◽  
Young-Gab Kim ◽  
Taek Lee ◽  
Chang-Joo Moon ◽  
Yoonjung Jung ◽  
...  
Keyword(s):  
Information Systems ◽  
Risk Analysis ◽  
Security Risk ◽  
Analysis Model

Information Security Risk Analysis

2008 ◽  
pp. 2849-2864
Author(s):  
Sanjay Goel ◽  
Damira Pon
Keyword(s):  
Information Systems ◽  
Information Security ◽  
Risk Analysis ◽  
Teaching Hospital ◽  
Information Science ◽  
Business And Society ◽  
Security Risk ◽  
Security Breaches ◽  
Operational Information ◽  
Nature Of Information

There is a strong need for information security education, which stems from the pervasiveness of information technology in business and society. Both government departments and private industries depend on information systems, as information systems are widespread across all business functions. Disruption of critical operational information systems can have serious financial impacts. According to a CSI/FBI report (2004), losses from security breaches have risen rapidly in recent years and exceeded $200 million in 2003. The information security field is very diverse and combines disciplines such as computer science, business, information science, engineering, education, psychology, criminal justice, public administration, law, and accounting. The broad interdisciplinary nature of information security requires several specialists to collaboratively teach the curriculum and integrate different perspectives and teaching styles into a cohesivedelivery. This chapter presents a pedagogical model based on a “teaching hospital” concept that addresses the issues introduced above. By using a specific information-risk-analysis case, the chapter highlights the basic concept of the teaching hospital and its application in teaching and learning contexts.

scholarly journals An Investigation Of Organizational Information Security Risk Analysis

2010 ◽  
Vol 3 (2) ◽  
Author(s):  
Zack Jourdan ◽  
R. Kelly Rainer, Jr. ◽  
Thomas E. Marshall ◽  
F. Nelson Ford
Keyword(s):  
Information Systems ◽  
Information Security ◽  
Risk Analysis ◽  
Security Threats ◽  
Security Risk ◽  
Current State ◽  
Policies And Procedures ◽  
Organizational Information ◽  
Quantitative Results ◽  
Information Security Risk

Despite a growing number and variety of information security threats, many organizations continue to neglect implementing information security policies and procedures.  The likelihood that an organization’s information systems can fall victim to these threats is known as information systems risk (Straub & Welke, 1998).  To combat these threats, an organization must undergo a rigorous process of self-analysis. To better understand the current state of this information security risk analysis (ISRA) process, this study deployed a questionnaire using both open-ended and closed ended questions administered to a group of information security professionals (N=32).  The qualitative and quantitative results of this study show that organizations are beginning to conduct regularly scheduled ISRA processes.  However, the results also show that organizations still have room for improvement to create idyllic ISRA processes. 

Information Security Risk Analysis

2011 ◽  
pp. 179-200
Author(s):  
Sanjay Goel ◽  
Damira Pon
Keyword(s):  
Information Systems ◽  
Information Security ◽  
Risk Analysis ◽  
Teaching Hospital ◽  
Information Science ◽  
Business And Society ◽  
Security Risk ◽  
Security Breaches ◽  
Operational Information ◽  
Nature Of Information

There is a strong need for information security education, which stems from the pervasiveness of information technology in business and society. Both government departments and private industries depend on information systems, as information systems are widespread across all business functions. Disruption of critical operational information systems can have serious financial impacts. According to a CSI/FBI report (2004), losses from security breaches have risen rapidly in recent years and exceeded $200 million in 2003. The information security field is very diverse and combines disciplines such as computer science, business, information science, engineering, education, psychology, criminal justice, public administration, law, and accounting. The broad interdisciplinary nature of information security requires several specialists to collaboratively teach the curriculum and integrate different perspectives and teaching styles into a cohesivedelivery. This chapter presents a pedagogical model based on a “teaching hospital” concept that addresses the issues introduced above. By using a specific information-risk-analysis case, the chapter highlights the basic concept of the teaching hospital and its application in teaching and learning contexts.

Towards Ontological Approach to Security Risk Analysis of Information System

2016 ◽  
Vol 7 (3) ◽  
pp. 1-25
Author(s):  
Oluwasefunmi ‘Tale Arogundade ◽  
Olusola Adeniran ◽  
Zhi Jin ◽  
Yang Xiaoguang
Keyword(s):  
Information System ◽  
Risk Analysis ◽  
Banking System ◽  
Security Risk ◽  
Analysis Model ◽  
Agent Based ◽  
Ontological Approach ◽  
Operational Lifetime ◽  
Analysis System ◽  
Events Data

Resource allocation decisions can be enhanced by performing risk assessment during the early development phase. In order to improve and maintain the security of the Information System (IS, hereafter), there is need to build risk analysis model that can dynamically analyze threat data collected during the operational lifetime of the IS. In this paper the authors propose an ontological approach to accomplishing this goal. They present analyzer model and architecture, an agent-based risk analysis system (ARAS) which gathers identified threats events, probe them and correlates those using ontologies. It explores both quantitative and qualitative risk analysis techniques using real events data for probability predictions of threats based on an existing designed security ontology. To validate the feasibility of the approach a case study on e-banking system has been conducted. Simulated IDS output serves as input into the risk analysis system. The authors used JADE to implement the agents, protégé OWL to create the ontology and ORACLE 11g SQL developer for the database. Optimistic results were obtained.

Sign in / Sign up

Export Citation Format

Share Document