Security meter: A practical decision-tree model to quantify risk

IEEE Security and Privacy

Volumn 3, Issue 3, 2005, Pages 18-24

  Sahinoglu, Mehmet ^a  

^a TROY UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DECISION-TREE MODEL; PROBABILISTIC ASSUMPTIONS; RISK SCENARIOS; SECURITY METER;

COMPUTER SOFTWARE; ERROR ANALYSIS; NUMERICAL METHODS; OPTIMIZATION; PARAMETER ESTIMATION; PROBABILITY; RISK ASSESSMENT; SECURITY SYSTEMS;

MATHEMATICAL MODELS;

EID: 20844461569     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2005.81     Document Type: Review

References (11)

1. E. Forni, "Certification and Accreditation," AUM Lecture Notes, Data Systems Design Laboratories, 2002; www.dsdlabs.com/security.htm.
2. B. Schneier, Applied Cryptography, 2nd ed., John Wiley & Sons, 1995
3. K.A. Forche, Computer Security Management, Boyd and Fraser, 1994.
4. Integrated Research in Risk Analysis and Decision Making in A Democratic Society, Workshop Report, US Nat'l Science Foundation, 2002, www.nsf.gov/pubs/nsf03209/start.htm.
5. M. Sahinoglu and E.H. Spafford, "A Bayes Sequential Statistical Procedure for Approving Products in Mutation-Based Software Testing," Proc. IFIP Conf. Approving Software Products (ASP 90), W Ehrenberger, ed., Elsevier Science Publishers, 1990, pp. 43-56.
6. M. Sahinoglu, J.J. Deely, and S. Capar, "Stochastic Bayes Measures to Compare Forecast Accuracy of Software-Reliability Models," IEEE Trans. Reliability, vol. 50, no. 1, 2001, pp. 92-97.
7. M. Sahinoglu, "An Empirical Bayesian Stopping Rule in Testing and Verification of Behavioral Models," IEEE Trans. Instrumentation and Measurement, vol. 52, no. 5, 2003, pp. 1428-1443.
8. M. Sahinoglu et al., "Measuring Availability Indices with Small Samples for Component and Network Reliability using the Sahinoglu-Libby Probability Model," to appear in IEEE Trans. Instrumentation and Measurement, vol. 54, no. 3, June 2005.
9. M. Sahinoglu, "Security Meter: A Probabilistic Framework to Quantify Security Risk," Certificate of Registration, US Copyright Office, TXu 1-134-116, 5 Dec. 2003.
10. S.A. Scherer, Software Failure Risk, Plenum Press, 1992.
11. B. Potter and G. McGraw, "Software Security Testing," IEEE Security & Privacy, vol. 2, no. 5, 2004, pp. 81-85.