Quantifying security threats and their potential impacts: a case study

Authors:
Anis Ben Aissa;Robert K. Abercrombie;Frederick T. Sheldon;Ali Mili
Affiliations:
Faculty of Sciences of Tunisia, University of Tunis, Tunis, Tunisia;Oak Ridge National Laboratory, Oak Ridge, USA 37831;Oak Ridge National Laboratory, Oak Ridge, USA 37831;College of Computing Sciences, New Jersey Institute of Technology, Newark, USA 07102-1982
Venue:
Innovations in Systems and Software Engineering
Year:
2010

Citing 6
Cited 6

Measuring Reliability as a Mean Failure Cost

HASE '07 Proceedings of the 10th IEEE High Assurance Systems Engineering Symposium
Evaluating security controls based on key performance indicators and stakeholder mission

Proceedings of the 4th annual workshop on Cyber security and information intelligence research: developing strategies to meet the cyber security and information intelligence challenges ahead
Synopsis of Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission Value

HASE '08 Proceedings of the 2008 11th IEEE High Assurance Systems Engineering Symposium
Methodology for Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission

HICSS '09 Proceedings of the 42nd Hawaii International Conference on System Sciences
Challenging the Mean Time to Failure: Measuring Dependability as a Mean Failure Cost

HICSS '09 Proceedings of the 42nd Hawaii International Conference on System Sciences
A Case Study on Asprox Infection Dynamics

DIMVA '09 Proceedings of the 6th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment

Modeling stakeholder/value dependency through mean failure cost

Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research
Software requirements for a system to compute mean failure cost

Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research
Defining and computing a value based cyber-security measure

Proceedings of the Second Kuwait Conference on e-Services and e-Systems
Failure impact analysis of key management in AMI using cybernomic situational assessment (CSA)

Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop
Designing and operating through compromise: architectural analysis of CKMS for the advanced metering infrastructure

Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop
Intrinsically resilient energy control systems

Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop

Quantified Score

Hi-index	0.00

Visualization

Abstract

In earlier works we presented a computational infrastructure that allows an analyst to estimate the security of a system in terms of the loss that each stakeholder stands to sustain as a result of security breakdowns. In this paper we illustrate this infrastructure by means of an e-commerce application.