Earticle

초록

영어

Over the last few years, perspectives in information security have been drawn, to a large extent, by risk management. The extensive use of risk management methodologies in organizations relying on an IT infrastructure proves the potential of the practice. In this survey we discuss the characteristics of the quantitative risk management methodologies, compare them and provide an overview on how these methodologies are entwined with the concept of adaptive security. We also discuss the challenges of quantitative risk management and adaptive security models and propose reliable criteria to compare the different approaches in the literature.

목차

Abstract
 1. Introduction
 2. Quantitative Risk Assessment Methodologies: State of the Art
  2.1. Risk Coverage
  2.2. Cyclic Risk Management
  2.3. Complexity
  2.4. Quantification Parameters
  2.5. Adaptive Character
  2.6. Summarizing Table
 3. Quantitative Security Models: the Mathematical Representation
  3.1. Quantifiable Input Data
  3.2. Quantifiable Output
  3.3. Mathematical Representation of Security Vectors
  3.4. Summarizing Table
 4. Estimating Security Metrics in Quantitative Risk Management
  4.1. Choosing the Metrics
  4.2. Estimation Methods
  4.3. Contribution and Specificities
  4.4. Summarizing table
 5. Adaptive Risk Management Approaches
  5.1. Model basis and Risk Coverage
  5.2. Experimental Results
  5.3. Summarizing Table
 6. Conclusion
 Acknowledgement
 References

키워드

저자

• Raed Labassi [ Sup'Com, University of Carthage, Tunisia ]
• Mohamed Hamdi [ Sup'Com, University of Carthage, Tunisia ]
• Tai-Hoon Kim [ Department of Convergence Security Sungshin Women's University, Korea ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of u- and e- Service, Science and Technology

• 간기

  격월간

• pISSN

  2005-4246

• 수록기간

  2008~2016

• 십진분류

  KDC 505 DDC 605