Title :
A conceptual model for computer security risk analysis
Author :
Bodeau, Deborah J.
Author_Institution :
Mitre Corp., Bedford, MA, USA
fDate :
30 Nov-4 Dec 1992
Abstract :
Risk analysis is required by a number of organizations to provide a basis for deciding which safeguards to implement to protect information systems. A variety of risk analysis techniques and tools have been developed. Each technique or tool is based, implicitly or explicitly, on a conceptual model of risk. The high-level conceptual model of disclosure risk for information systems used in the Analysis of Networked Systems Security Risks (ANSSR) prototype is presented
Keywords :
information systems; risk management; security of data; ANSSR; Analysis of Networked Systems Security Risks; computer security risk analysis; disclosure risk; information systems; Accreditation; Computer security; Information analysis; Information security; Information systems; Military computing; Protection; Prototypes; Risk analysis; Risk management;
Conference_Titel :
Computer Security Applications Conference, 1992. Proceedings., Eighth Annual
Conference_Location :
San Antonio, TX
Print_ISBN :
0-8186-3115-5
DOI :
10.1109/CSAC.1992.228233