Collaborative Research: Algorithmic Aspects of Risk Management

该建议涉及风险分析的形式化建模，因为它与系统的安全性有关。文献中的风险分析侧重于与人工响应相结合的离线计算。我们提出了一种实时的风险管理方法，通过动态交易实用程序来获得安全性。我们的方法的一个结果是，它为用户提供了任何预定义的风险承受水平的最大可能的功能。我们通过流调整对风险管理进行建模，在一个三要素图中，分区对应于系统中的威胁、权限和资产。重点是在此设置中为各种流查询建立复杂性。我们已经确定了这种情况下的一些问题是弱np完全的，这就提出了为它们设计多项式近似方案的可能性。

This proposal is concerned with formal modeling of risk analysis as it relates to the security of systems. Risk analysis in the literature has focused on offline computations in conjunction with a manual response. We propose a real-time approach to risk management by dynamically trading utility for security. A consequence of our approach is that it provides users with the maximum possible functionality for any predefined level of risk tolerance. We model risk management through flow adjustment in a tripartite graphs, with the partitions corresponding to threats, permissions and assets in the system. The focus is on establishing the complexities for the various flow queries in this setting. We have already established that some of the problems in this setting are weakly NP-complete and this raises the possibility of designing polynomial approximation schemes for them.