A dynamic risk model for information technology security in a critical infrastructure environment

Risk-Based Decision Making in Water Resources, Proceedings of the Conference

Volumn , Issue , 2002, Pages 23-39

  Saunders, John H ^a  

^a NATIONAL DEFENSE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; COMPUTER VIRUSES; ELECTRONIC MAIL; INFORMATION TECHNOLOGY; NETWORK PROTOCOLS; PROGRAMMABLE LOGIC CONTROLLERS; SCADA SYSTEMS; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS;

CRITICAL INFRASTRUCTURE; DYNAMIC RISK MODEL;

RISK ASSESSMENT;

EID: 0242365403     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (11)

1. AMSA (2002). Asset Based Vulnerability Checklist. Association of Metropolitan Sewerage Agencies, Washington, DC.
2. CCIMB (1999). Common Criteria for Information Technology Security Evaluation: Part 1. Introduction and General Model, version 2.1, Common Criteria Information Management Board, 99-031, August.
3. Ezell, B., J. Farr, and I. Wiese (2000). "Infrastructure risk analysis model." Journal of Infrastructure Systems, September.
4. Forrester, J. (1961). Industrial Dynamics. Williston, VT: Pegasus Communications.
5. Haimes, Y.Y. (1998). Risk Modeling, Assessment, and Management. New York: John Wiley and Sons.
6. Longstaff, T., C. Chittister, R. Pethia, and Y.Y. Haimes (2000). "Are we forgetting the risks of information technology?" IEEE Computer, December.
7. McClure, S., J. Scambray, and G. Kurtz (2001). Hacking Exposed. Berkeleym, CA: Osbourne McGraw-Hill.
8. NIST (2002). Guideline on Network Security Testing. National Institute for Science and Technology, Publication 800-42.
9. Sandia (2002). Risk Assessment Methodology for Dams. Sandia National Laboratory, http://tswg.gov/tswg/ip/RAMD_TB.htm.
10. USDOE (2002). 21 Steps to Improve Cyber Security of SCADA Networks. US Department of Energy, Office of Energy Assurance, September.
11. Wenger, A., J. Metzger, and M. Dunn, (Eds.) (2001). International Critical Information Infrastructure Protection Handbook, Appendix A1, Glossary of Terms. Produced by Workshop on Critical Infrastructure Protection in Europe. Zurich, Switzerland, November 8-10. http://www.isn.ethz.ch/crn/extended/workshop_zh/ebp_cip_handbook.pdf.