Quantitative risk assessment for dependent vulnerabilities

Proceedings - Annual Reliability and Maintainability Symposium

Volumn , Issue , 2006, Pages 82-85

  Sahinoglu, Mehmet ^a  

^a TROY UNIVERSITY   (United States)

Author keywords

Countermeasure; Disjoint; Independence; Quantitative; Security; Threat; Vulnerability

Indexed keywords

COUNTERMEASURES; DISJOINTS; QUANTITATIVE SECURITY RISK ASSESSMENT; THREATS;

BUDGET CONTROL; PROBABILISTIC LOGICS; SECURITY SYSTEMS;

RISK ASSESSMENT;

EID: 34250194642     PISSN: 0149144X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RAMS.2006.1677354     Document Type: Conference Paper

References (12)

1. E. Forni (CISSP), "Certification and Accreditation", AUM Lecture Notes, DSD Laboratories, Virginia, 2002
2. B. Schneier, "Attack Trees", Dr. Dobbs ' Journal, Dec. 99
3. Symantec Enterprise Security Architecture (SESA™), www.symantec.com. Symantec World HQ, Cupertino, Ca.
4. Integrated Research in Risk Analysis and Decision Making in a Democratic Society, NSF, Workshop Report, www.nsf.gov/pubs/nsf03209/start.htm, 2002
5. M. Sahinoglu, J. J. Deely, S. Capar, "Stochastic Bayes Measures to Compare Forecast Accuracy of Software-Reliability Models", IEEE Trans. Rel., 92-97, March 2001
6. M. Sahinoglu, "An Empirical Bayesian Stopping Rule in Testing and Verification of Behavioral Models" IEEE Transactions on Instrumentation and Measurement, - Vol. 52, Number 5, 1428-1443, October 2003
7. M. Sahinoglu, "Security Meter- A Probabilistic Framework to Quantify Security Risk", Certificate of Registration, US Copyright Office, Short Form TXu 1-134-116, December 2003
8. O. H. Alhazmi, Y. K. Malaya, "Quantitative Vulnerability Assessment of Systems Software", Proc. Ann. Reliability & Maintainability Symp., RAMS05, Jan. 24-27, 2005
9. S. A. Scherer, Software Failure Risk, Plenum Press, New York, 1992
10. M. Sahinoglu, "Security Meter-A Practical Decision Tree Model to Quantify Risk", IEEE Security and Privacy, May/June 2005, 18-24
11. th Ed., W. H. Freeman and Co., 2003
12. Sahinoglu M., Libby D., Das S. R., "Measuring Availability Indices with Small Samples for Component and Network Reliability using the Sahinoglu-Libby Probability Model," IEEE Transactions on Instrumentation and Measurement, Vol. 54, No.3, June 2005, 1283-1295