Title :
An Empirical Model for Quantifying Security Based on Services
Author :
Serrelis, Emmanouil ; Alexandris, Nikos
Author_Institution :
Dept. of Inf., Univ. of Piraeus, Piraeus
Abstract :
This paper presents a novel approach for quantifying the security of specific services as well as that of a whole organisation. This is done by reducing the security of any service to five selected security factors which can be measured by posing questions with objective answers. The security of any specific service is the weighted average of those five factors, whereas the overall security is the weighted average of the services.
Keywords :
information networks; security of data; information security; organization security; security factors; security metrics; Control systems; ISO standards; Informatics; Information management; Information security; Joining processes; Loss measurement; Personnel; Risk management; System testing;
Conference_Titel :
Computing in the Global Information Technology, 2007. ICCGI 2007. International Multi-Conference on
Conference_Location :
Guadeloupe City
Print_ISBN :
0-7695-2798-1
DOI :
10.1109/ICCGI.2007.14
