Threat-Based Risk Assessment for Enterprise Networks
Threat-Based Risk Assessment for Enterprise Networks
复制标题
企业网络基于威胁的风险评估
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
R. Lippmann
中科院分区：
文献类型：
--
作者：
J. Riordan;R. Lippmann
保护企业网络需要持续的风险评估，该评估可自动识别网络安全风险并确定其优先顺序，实现网络安全资源的高效分配，并增强对现代网络威胁的防护。林肯实验室开发了一个基本的网络安全成熟度模型来指导此类风险评估的开发，并为最重要的网络威胁开发了实用的风险度量标准。这些指标可以根据与安全相关的网络数据自动连续计算。
Protecting enterprise networks requires continuous risk assessment that automatically identifies and prioritizes cybersecurity risks, enables efficient allocation of cybersecurity resources, and enhances protection against modern cyberthreats. Lincoln Laboratory developed a foundational network security maturity model to guide development of such risk assessments and has developed practical risk metrics for the most important cyberthreats. These metrics can be computed automatically and continuously from security-relevant network data.