Checklist-based risk analysis with evidential reasoning

Authors:
Sungbaek Cho;Zbigniew Ciechanowicz
Affiliations:
Univ. of London, London, UK;Univ. of London, London, UK
Venue:
Sec '01 Proceedings of the 16th international conference on Information security: Trusted information: the new decade challenge
Year:
2001

Citing 4
Cited 0

Varieties of ignorance and the need for well-founded theories

Information Sciences: an International Journal - Special issue on information sciences—past, present, and future
Security in computing

Security in computing
Applications of the Dempster-Shafer theory of evidence for simulation

WSC '86 Proceedings of the 18th conference on Winter simulation
Evidential reasoning for web trust assurance services

Journal of Management Information Systems - Special section: Exploring the outlands of the MIS discipline

Quantified Score

Hi-index	0.00

Visualization

Abstract

Measuring risk is not a simple task since it almost invariably includes an analyst's subjective judgment. Risk analysis often forces the analyst to estimate or predict future events, which are uncertain. Therefore, we should consider the uncertainties associated with judgments made by the analyst. Hence in this article, we try to apply belief functions, which are used to express and manipulate uncertainties. We use an evidential network to combine answers and uncertainties from a checklist-based risk analysis. A checklist method is still useful in that it is relatively easier and simpler than other risk analysis methods. Furthermore, a checklist-based risk analysis can be used in a baseline approach. To establish the measure of risk in a checklist-based risk analysis can also be applied to the self-assessment of BS7799 compliance when preparing for accredited certification against BS7799.