Title :
A Risk Based Approach for Security Assurance Evaluation of IT Systems
Author :
Ouedraogo, Moussa ; Mouratidis, Haralambos ; Khadraoui, Djamel ; Dubois, Eric
Author_Institution :
Public Res. Center Henri Tudor, Kirchberg
Abstract :
Research literature has argued the need for a methodology to measure security assurance levels of a system as vital in order to maintain and improve the overall system security. This paper proposes a risk-based security assurance metric and aggregation techniques to be incorporated in a methodology for the evaluation of IT systems security assurance.
Keywords :
information technology; risk management; security of data; IT systems; aggregation techniques; risk-based security assurance metric; security assurance evaluation; Communication networks; Communication system security; Computer networks; Computer security; Current measurement; Gain measurement; Informatics; Information security; Robustness; Solids; Aggregation; Metrics; Risk Assessment; Security Assurance;
Conference_Titel :
Communication Networks and Services Research Conference, 2009. CNSR '09. Seventh Annual
Conference_Location :
Moncton, NB
Print_ISBN :
978-1-4244-4155-6
Electronic_ISBN :
978-0-7695-3649-1
DOI :
10.1109/CNSR.2009.74
