Assessing and Forecasting Cybersecurity Impacts
Assessing and Forecasting Cybersecurity Impacts
复制标题
评估和预测网络安全影响
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
A. Kosgodagan
中科院分区：
文献类型：
--
作者：
Aitor Couce Vieira;D. Insua;A. Kosgodagan
网络攻击对大多数组织构成主要威胁。除了财务后果之外，它们还可能带来多种影响，在制定风险管理决策以分配所需的网络安全资源时需要考虑这些影响。传统上，专家们通过考虑与信息的机密性、完整性和可用性相关的影响来关注问题的技术角度。我们采用更全面的方法来确定更广泛的通用网络安全目标、相应的属性集以及相关的预测和评估模型。这些被用作网络安全风险管理决策支持的基本要素。
Cyberattacks constitute a major threat to most organizations. Beyond financial consequences, they may entail multiple impacts that need to be taken into account when making risk management decisions to allocate the required cybersecurity resources. Experts have traditionally focused on a technical perspective of the problem by considering impacts in relation with the confidentiality, integrity, and availability of information. We adopt a more comprehensive approach identifying a broader set of generic cybersecurity objectives, the corresponding set of attributes, and relevant forecasting and assessment models. These are used as basic ingredients for decision support in cybersecurity risk management.