Value analysis of cyber security based on attack types
Value analysis of cyber security based on attack types
复制标题
基于攻击类型的网络安全价值分析
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Hong Xie
中科院分区：
文献类型：
--
作者：
M. A. Roumani;C. Fung;Shri M. Rai;Hong Xie
由于不同组织严重依赖信息通信技术，确保安全并最大程度地减少网络攻击造成的经济影响具有挑战性，本文提出了一种估算公共和私营部门组织网络安全成本的方法。本文还描述了一种选择网络安全改进类型的方法，以确保实现组织目标。考虑了不同类型的网络攻击以及这些攻击的后续影响。提出了一种价值分析方法，通过确定各种网络安全技术的部署优先级来支持决策过程。所提出的方法基于与攻击相关的安全成本和损失。本文提供了示例来说明所提出的方法。
It is challenging to ensure security and to minimize economic impacts due to cyber-attacks because of the heavy reliance on ICT in different organizations and this paper presents an approach to estimate the cost of cyber security in public and private sector organizations. The paper also describes an approach for selecting the type of cyber security improvements to ensure that organizational goals are achieved. Different types of cyber-attacks and the subsequent impacts of these attacks are considered. A Value Analysis method is proposed to support the decision-making process by determining the priorities of deployment of various cyber security technologies. The proposed method is based on security costs related to and the losses due to attacks. Examples are provided in the paper to illustrate the proposed approach.