A Risk Based Approach for Security Assurance Evaluation of IT Systems

Author

Ouedraogo, Moussa ; Mouratidis, Haralambos ; Khadraoui, Djamel ; Dubois, Eric

Author_Institution

Public Res. Center Henri Tudor, Kirchberg

fYear

2009

fDate

11-13 May 2009

Firstpage

428

Lastpage

430

Abstract

Research literature has argued the need for a methodology to measure security assurance levels of a system as vital in order to maintain and improve the overall system security. This paper proposes a risk-based security assurance metric and aggregation techniques to be incorporated in a methodology for the evaluation of IT systems security assurance.

Keywords

information technology; risk management; security of data; IT systems; aggregation techniques; risk-based security assurance metric; security assurance evaluation; Communication networks; Communication system security; Computer networks; Computer security; Current measurement; Gain measurement; Informatics; Information security; Robustness; Solids; Aggregation; Metrics; Risk Assessment; Security Assurance;

fLanguage

English

Publisher

ieee

Conference_Titel

Communication Networks and Services Research Conference, 2009. CNSR '09. Seventh Annual

Conference_Location

Moncton, NB

Print_ISBN

978-1-4244-4155-6

Electronic_ISBN

978-0-7695-3649-1

Type

conf

DOI

10.1109/CNSR.2009.74

Filename

4939162

Link To Document

https://search.isc.ac/dl/search/defaultta.aspx?DTC=49&DC=3430153