Algebraic specification of network security risk management

Proceedings of the ACM Workshop on Formal Methods in Security Engineering

Volumn , Issue , 2003, Pages 52-60

  Hamdi, Mohamed ^a   Boudriga, Noureddine ^a  

^a UNIVERSITY OF CARTHAGE   (Tunisia)

Author keywords

Algebraic modeling; Formal specifications; Risk management

Indexed keywords

ALGEBRA; AUTOMATION; COMPUTATIONAL COMPLEXITY; FORMAL LANGUAGES; HEURISTIC METHODS; MATRIX ALGEBRA; PROBABILITY; RISK ASSESSMENT; RISK MANAGEMENT; SET THEORY; SPECIFICATIONS;

ALGEBRAIC MODELING; COUNTERMEASURE MATRICES; FORMAL SPECIFICATIONS; PSEUDO-INVERSES;

SECURITY OF DATA;

EID: 2642567804     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1035429.1035435     Document Type: Conference Paper

References (18)

1. R. Power, "2002 CSI/FBI Computer Crime and Security Survey," Computer Security Institute, 2002.
2. G. Stonebumer, A. Grogen, A. Fering, "Risk Management Guide for Information Technology Systems," National Institute for Standards and Technology, Special Publication 800-30.
3. "A Guide to Risk Management and Safeguard Selection for IT Systems," Government of Canada, Communications Security Establishment, January 1996.
4. "Information Technology Security Evaluation Manual (ITSEM)," COMMISSION OF THE EUROPEAN COMMUNITIES, DIRECTORATE GENERAL XIII: Telecommunications, Information Market and Exploitation of Research, DIRECTORATE B: Advanced Communications Technologies and Services, 1993.
5. I. ClaSSen, H. Ehrig, D. Wolz, "Algebraic Specification Techniques and Tools for Software Development: the ACT Approach," AM AST Series in Computing - Vol. 1, ISBN: 981-02-1227-5.
6. J. A. Goguen, G. Malcolm, "Software Engineering with OBJ: Algebraic Specification in Action," Kluwer Academic Publishers, Boston, April 2000, ISBN 0-7923-7757-5.
7. T.P. Peltier, "Information Security Risk Analysis," Auerbach Publications, ISBN: 0-8493-0880-1, 2001.
8. A. Holmes, "Risk Management," Capstone Publishing, ISBN: 1-84112-341-2, 2002.
9. C.J. Alberts, A.J. Dorofee, "Managing Information Security Risks: the OCTAVE Approach," Addison Wesley Professional, ISBN: 0321118863, July 2002.
10. "Information Security Risk Assessment: Practices of Leading Organizations," United States General Accounting Office, GAO/AIMD-00-33, November 1999.
11. "Information Security Management: Learning from Leading Organizations," United States General Accounting Office, GAO/AIMD-98-68, May 1998.
12. M. Hamdi, N. Boudriga, "NetRAM: A Novel Method for Network Security Risk Management," Submitted to NORDSEC2003, Nordic Workshop on Secure IT Systems, Norway.
13. B. Schneier, "Secrets and Lies: Digital Security in a Networked World," John Wiley & Sons, ISBN: 0471253111, 2001.
14. T. Tidwell, R. Larson, K. Fitch, J. Hale, "Modeling Internet Attacks," Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, West Point, NY, June, 2001.
15. J. Loeckx, H-D. Ehrich, M. Wolf, "Specification of Abstract Data Types," Wiley&Teubner, 1996, ISBN: 0-471-95067-X.
16. FedCIRC, U.S. General Services Administration, "Common Vulnerabilities and Exposures," http://www.cve.mitre.org.
17. National Institute for Standards and Technology, Computer Security Division"The ICAT Project," http://icat.nist.gov.
18. K. Deb, A. Pratap, S. Agrawal "A Fast and Elitist Multi-objective Genetic Algorithm: NSGA-II," Proceedings of the Parallel Problem Solving from Nature VI Conference.