Security risk analysis and evaluation

Security and cyber-terrorism have become increasingly important issues for organizations and the society. We propose a risk management framework from a bottom-up perspective, i.e. modeling the different types of attacks (or risk types) that an organization could experience. A quantitative model is presented to measure the economic impact of security risk. In addition to risk management, a further goal of this research is to apply data mining techniques to predict and prevent security attacks in an effective manner.