Tracking the complexity of interactions between risk incidents and engineering systems

Systems Engineering

Volumn 8, Issue 3, 2005, Pages 262-277

  Lambert, James H ^{a,b,c,d,e,f,g,h,i,j}   Schulte, Benjamin L ^a,b   Sarda, Priya ^a,k  

^a UNIVERSITY OF VIRGINIA   (United States)

^b Center for Risk Management of Engineering Systems   (United States)

^c University of Virginia   (United States)

^d International Council on Systems Engineering ^*  (United States)

^e International Council on Systems Engineering   (United States)

^f Society for Risk Analysis   (United States)

^g American Society for Industrial Security   (United States)

^h Institute for Electrical and Electronic Engineers   (United States)

ⁱ AMERICAN SOCIETY OF CIVIL ENGINEERS   (United States)

^j Sigma Xi ^*  (United States)

^k U S DEPARTMENT OF TRANSPORTATION   (United States)

more..

Author keywords

Anomaly detection; Event logs; Failure modes and effects analysis; Risk assessment; Scenario identification; Statistical process control

Indexed keywords

AUTOMATED DETECTION; ENGINEERING SYSTEMS; RISK IDENTIFICATION; RISK INCIDENTS;

AUTOMATION; DATABASE SYSTEMS; RISK MANAGEMENT; SECURITY SYSTEMS; SYSTEMS ENGINEERING;

RISK ASSESSMENT;

EID: 27644575691     PISSN: 10981241     EISSN: 15206858     Source Type: Journal    
DOI: 10.1002/sys.20032     Document Type: Article

References (44)

1. J. Allan, R. Papka, and V. Lavrenko, Research and development in information retrieval. Online new event detection and tracking, Proc SIGIR '98: 21st Annu Int ACM SIGIR Conf, ACM Press, New York, 1998, pp. 37-45.
2. T.R. Amsden, E.H. Butler, and M.D. Amsden, SPC simplified: Practical steps to quality, Productivity, Inc., New York, 1998.
3. A.J. Butte and I.S. Kohane, Mutual information relevance networks: functional genomic clustering using pairwise entropy measurements, Hawaii, Pacific Symp Biocomput, World Scientific, Singapore, 2000, pp. 418-429.
4. W.R. Corcoran, "Defining and analyzing precursors," Accident precursor analysis and management: Reducing technological risk through diligence, J.R. Phimister, V.M. Bier, and H.C. Kunreuther (Editors), National Academies Press, Washington, DC, 2004, pp. 79-88.
5. S.V. Crowder, Design of exponentially weighted moving average schemes, J Qual Technol 2 (1989), 155-162.
6. Department of Homeland Security (DHS), Sharing information to protect the economy, Washington, DC, 12 May 2005, http://www.dhs.gov/dhspublic/display? theme=73&content= 1375.
7. R.L. Dillon and M.E. Pate-Cornell, Including technical and security risks in the management of information systems: A programmatic risk management model, Syst Eng 8(1) (2004), 15-28.
8. F. Esponda, S. Forrest, and P. Helman, A formal framework for positive and negative detection schemes. IEEE Trans Syst Man Cybernet 34(1) (2004), 357-373.
9. T. Fawcett and F. Provost, Activity monitoring: Noticing interesting changes in behavior, Proc Fifth ACM SIGKDD Int Conf Knowledge Discovery Data Mining, 1999, pp. 53-63.
10. M.A. Gips, Shared intelligence makes everyone smarter, Security Management 48(1) (2004), 52-60.
11. S.K. Hafiz, Entropies as measures of software information, IEEE Conf Software Maintenance, Florence, Italy, 2001, pp. 110-117.
12. Y.Y. Haimes, Risk modeling, assessment, and management, Wiley, New York, 1998, 2004.
13. Y.Y. Haimes, K. Tarvainen, T. Shima, and J. Thadathil, Hierarchical multiobjective analysis of large-scale systems, Hemisphere, New York, 1990.
14. Y.Y. Haimes, S. Kaplan, and J.H. Lambert, Risk filtering, ranking, and management framework, Risk Anal 22(2) (2002), 383-397.
15. A.G. Hessami, Risk management: a systems paradigm, Syst Eng 2(3) (1999), 156-167.
16. J.S. Hunter, The exponentially weighted moving average, J Qual Technol 8 (1986), 155-162.
17. H.S. Javitz and A. Valdes, The SRI IDES statistical anomaly detector, Proc IEEE Symp Res Security Privacy, 1991, pp. 316-326.
18. S. Kaplan and J.B. Garrick, On the quantitative definition of risk, Risk Anal 1(1) (1981), 11-27.
19. S. Kaplan, B. Zlotin, A. Zussman, and S. Vishnipolski, New tools for failure and risk analysis - anticipatory failure determination and the theory of scenario structuring, Ideation International, Southfield, MI, 1999.
20. S. Kaplan, Y.Y. Haimes, and J.B. Garrick, Fitting hierarchical holographic modeling into the theory of scenario structuring and a resulting refinement to the quantitative definition of risk, Risk Anal 21(5) (2001), 807-818.
21. Y. Kawauchi, M. Inaba, and T. Fukuda, Dynamically reconfigurable intelligent system of cellular robotic system with entropy min/max hybrid algorithm, Proc IEEE Int Conf Robotics Automation 1, 1994, pp. 464-469.
22. J.H. Lambert and C. Patterson, Prioritization of schedule dependencies in hurricane recovery of transportation agency, J Infrastructure Syst 8(3) (2002), 103-111.
23. J.H. Lambert and P. Sarda, Terrorism scenario identification by superposition of infrastructure networks, J Infrastructure Syst (2005), accepted for publication.
24. J.H. Lambert, Y.Y. Haimes, D. Li, R. Schooff, and V. Tulsiani, Identification, ranking, and management of risks in a major system acquisition, J Reliab Eng Syst Safety 72(3) (2001), 315-325.
25. J.M. Lucas and M.S. Saccucci, Exponentially weighted moving average control schemes: Properties and enhancements (with discussion), Technometrics 32 (1990), 1-29.
26. J.R.W. Merrick, J.R. van Dorp, J. Harrald, T. Mazzuchi, and J.E. Spahn, A systems approach to managing oil transportation risk in Prince William Sound, Syst Eng 3(3) (2000), 128-142.
27. C.C. Michael, Finding the vocabulary of program behavior data for anomaly detection, Proc DARPA Information Survivability Conf Exposition, 2003, pp. 152-163.
28. Y. Michlin, B. Sedan, and D. Ingman, Reliability improvement of Internet Web servers through statistical process control, IEEE Trans Reliab 53(4) (2004), 551-556.
29. D.C. Montgomery, Introduction to statistical quality control, Wiley, New York, 1997.
30. North American Electric Reliability Council (NERC), High-voltage transmission circuit miles (230kV and above), Washington, DC, 11 May 2005a, ftp://ftp.nerc.com/pub/sys/all_updl/docs/regional/HistoricTotalMiles.doc.
31. North American Electric Reliability Council (NERC), System disturbance reports, Washington, DC, 4 February 2005b, http://www.nerc.com/~filez/dawg- disturbancereports.html.
32. North American Electric Reliability Council (NERC), U.S. Department of Energy incident and disturbance reporting requirements, Washington, DC, 11 May 2005c, http://www.nerc.com/~dawg/append-a.html.
33. North American Electric Reliability Council (NERC), Urgent Action Standard 1200 - Cyber Security, Washington, DC, 11 May 2005d, ftp://www.nerc.com/pub/sys/all_updl/standards/rs/ Urgent_Action_Standard_1200_Cyber_ Security.pdf.
34. Y. Papadopoulos, Model-based system monitoring and diagnosis of failures using state charts and fault trees, Safety Reliab Security Ind Comput Syst 81(3) (2003), 325-341.
35. J. Park, W. Jung, and J. Ha, Development of the step complexity measure for emergency operating procedures using entropy concepts, Reliab Eng Syst Safety 71(2) (2001), 115-130.
36. A.P. Sage and W.B. Rouse, "An introduction to systems engineering and systems management," Handbook of systems engineering and management, A.P. Sage and W.B. Rouse (Editors), Wiley, New York, 1999, pp. 1-58.
37. P. Sarda, Process control for tracking knowledge acquisition about risk scenarios and their affected systems, M.S. Thesis, Center for Risk Management of Engineering Systems and Department of Systems and Information Engineering, University of Virginia, Charlottesville, 2004.
38. B.L. Schulte, Combining process characteristics to determine sources of risk to engineering systems, M.S. Thesis, Center for Risk Management of Engineering Systems and Department of Systems and Information Engineering, University of Virginia, Charlottesville, 2005.
39. C.E. Shannon and W. Weaver, The mathematical theory of communication, University of Illinois, Chicago, 1963.
40. J. Sharit, A modeling framework for exposing risks in complex systems, Risk Anal 20(4) (2000), 469-482.
41. A. Valishevsky and A. Borisov, Using interval-valued entropy for risk assessment, Proc Int Conf Model Simulation Bus Syst, Vilnius, Lithuania, 2003, pp. 74-78.
42. B. Wei, A unified approach to failure mode, effects and criticality analysis, Proc Annu Reliab Maintainability Symp, IEEE Reliability Society, 1991, pp. 260-271.
43. N. Ye and Q. Chen, Computer intrusion detection through EWMA for autocorrelated and uncorrelated data, Trans Reliab 52(1) (2003), 75-82.
44. N. Ye, Q. Chen, and C. Borror, EWMA forecast of normal system activity for computer intrusion detection, Trans Reliab 53(4) (2004), 557-566.