Risk assessment method based on business process-oriented asset evaluation for information system security

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4489 LNCS, Issue PART 3, 2007, Pages 1024-1031

  Eom, Jung Ho ^a   Park, Seon Ho ^a   Han, Young Ju ^a   Chung, Tai Myoung ^a  

^a Sungkyunkwan University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

ADMINISTRATIVE DATA PROCESSING; ASSET MANAGEMENT; INFORMATION SYSTEMS; MATRIX ALGEBRA; SECURITY OF DATA;

BUSINESS PROCESS-ORIENTED ASSET EVALUATION; INFORMATION SYSTEM SECURITY;

RISK ASSESSMENT;

EID: 38149131382     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-72588-6_165     Document Type: Conference Paper

References (12)

1. ISO/IEC TR 13335(Part 1): Concepts and Models for IT Security, ISO/IEC JTC1/SC 27, 1996.
2. ISO/IEC TR 13335(Part 2): Managing and Planning IT Security, ISO/IEC JTC1/SC 27, 1997.
3. ISO/IEC TR 13335(Part 3): Techniques for the Management of IT Security, ISO/IEC JTC1/SC 27, 1997.
4. NIST Special Publication 800-30: Computer Security-Risk Management Guide, NIST, 2001.
5. B. D. Jenkins, 'Security risk analysis and management', Countermeasures Inc, 1998.
6. BS 7799: Guide to Risk Assessment and Risk management, BSI, 1998.
7. C. J. Alberts et al,'OCTAVE: Operationally Critical Threat, Asset, and Vulnerability Evaluation', Software Engineering Institute Carnegie Mellon, 1999.
8. CSE MG-3: A Guide to Risk Assessment and Safeguard Selection For Information Technology Systems, Communications Security Establishment, Jan. 1996.
9. Risk Analysis and Management Standards for Public Information Systems Security-Concepts and Models, TTA-Korea, 1998.
10. Risk Analysis and Management Standards for Public Information Systems Security-Risk Analysis, TTA-Korea, 2000.
11. Jung-Ho Eom, et. al, 'Two-Dimensional Qualitative Asset analysis Method based on Business Process-Oriented Asset Evaluation', Journal of KIPS, pp.79-85, Dec. 2005.
12. Kang Kim, et. al, 'A Risk Analysis Model For information System Security', journal of KIPS, pp.60-67, Sep. 2002.