Earticle

초록

영어

The current information security risk evaluation methods are only concerned with the risk of system components, rarely based on business risk perspective. Thus, it is difficult to meet different levels of information security risk comprehension such as the operational staff and the organization's manager. This paper proposes a hierarchical risk evaluation method based on asset dependence chain to quantify the hierarchical risk, the information systems security risks are divided into three levels: the component level, system level and organizational level. By analyzing the assets dependence in three levels, a "business systems-information systems-system components" assets dependence chain is formed. In the end, a hierarchical risk calculation method is presented. The risk analysis result can reflect the level of security risk evaluation needs more comprehensively and objectively.

목차

Abstract
 1. Introduction
 2. Risk Factors Analyses
  2.1. Asset Analysis
  2.2. Vulnerabilities Analyses
  2.3. Threat Analysis
  2.4. Control Measures Analysis
 3. Risk Calculation Method
 4. Conclusions
 References

키워드

저자

• Xin Tong [ China Information Technology Security Evaluation Center, Beijing, China ]
• Xiaofang Ban [ China Information Technology Security Evaluation Center, Beijing, China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605