Towards a systematic approach for improving information security risk management methods

IEEE International Symposium on Personal, Indoor and Mobile Radio Communications, PIMRC

Volumn , Issue , 2007, Pages

  Papadaki, Katerina ^a   Polemi, Ninneta ^b  

^a NATIONAL TECHNICAL UNIVERSITY OF ATHENS   (Greece)

^b UNIVERSITY OF PIRAEUS   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; RISK MANAGEMENT; SECURITY SYSTEMS; SOCIETIES AND INSTITUTIONS;

DESIGN SCIENCE RESEARCH; INFORMATION SECURITY RISK MANAGEMENT METHODS; SYSTEMATIC PROCESS;

SECURITY OF DATA;

EID: 44349132191     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PIMRC.2007.4394150     Document Type: Conference Paper

References (22)

1. ISO/IEC TRI3335-3 "Information Technology - Guidelines for the management of IT Security", Part 3: Techniques for the management of IT Security. 1998.
2. Dhillon, G. and Backhouse, J., "Current Direction in IS Security Research: Towards Socio- Organizational Perspectives", Information Systems Journal, vol. 11, pp. 127-153, 2001.
3. Siponen, M., "Analysis of modern IS security development approaches: towards the next generation of social and adaptable ISS methods", Information and Organization, vol. 15, pp. 339-375, 2005.
4. Armstrong, H., "Managing information security in healthcare - an action research experience", in Proceedings of the Sixteen Annual Working Conference on Information Security Proceedings, 2000.
5. Butler, S. and Fischbeck, P., "Multi-Attribute Risk Assessment", in Proceedings of the Symposium on Requirements Engineering for Information Security (SREIS) Proceedings, 2002.
6. Stamatiou, Y., Skipenes, E., Henriksen, E., Stathiakis, N.,Sikianakis, A., Charalambous, E., Antonakis, N., Stølen, K., den Braber, F.,Soldal Lund, M., Papadaki, K., Valvis, G., "The CORAS approach for modelbased risk management applied to a telemedicine service", in Proceedings of the Medical Informatics Europe (MIE'2003), pp. 206- 211, IOS Press, 2003.
7. Purao, S. "Design Research in the Technology of Information Systems: Truth or Dare", GSU Department of CIS Working Paper. Atlanta. 2002.
8. Vaishnavi, V., and Kuechler, B. "Design Research in Information Systems," Association for Information Systems, 2005.
9. Hevner, A.R., March, S.T., and Park, J. "Design Research in Information Systems Research," MIS Quarterly, vol. 28, no. 1, pp 75-105, 2004.
10. Peffers, P., Tuunanen, T., Gengler, C. E., Rossi, M., Hui, W., Virtanen, V., and Bragge, J., "The Design Science Research Process: A Model for Producing and Presenting Information Systems Research", in Proceedings of the First International Conference on Design Science Research in Information Systems and Technology, Claremont, California, 2006, pp. 84-147.
11. Kuhn, T.S., The Structure of Scientific Revolutions, 3rd Edition, University of Chicago Press, 1996.
12. Lakatos, I., The Methodology of Scientific Research Programmes, John Worral and Gregory Currie, Eds., Cambridge, Cambridge University Press, 1978.
13. Simon, H.A. The Sciences of the Artificial, 3rd Edition, MIT Press, Cambridge, MA, 1996.
14. March, S.T. and Smith, G. "Design and Natural Science Research on Information Technology," Decision Support Systems, vol. 15, no. 4, pp. 251-266, December 1995.
15. Takeda, H., Veerkamp, P., Tomiyama, T., and Yoshikawam, H. "Modeling Design Processes", AI Magazine, pp. 37-48, 1990.
16. Papadaki, K., Polemi, N. and Koutsouris, D. "A fuzzy methodology for assessing the aggregate impact of security incidents", in Proceedings of the First International Conference in Global e-Security, 2005.
17. Papadaki, K. and Polemi, N. "Evaluation of security technologies: a fuzzy multiple attribute group decision-making approach", in Proceedings of the European Conference on Information Technology Evaluation (ECITE), 2006.
18. Chen, C. "Extensions of the TOPSIS for group decision-making under fuzzy environment", Fuzzy Sets and Systems, vol. 114, pp. 1-9, 2000.
19. Zadeh, L.A., "The concept of a linguistic variable and its applications to approximate reasoning", Part I, Inform. Sci., vol. 8, pp. 199-249.
20. Part II, Inform. Sci., vol. 8, pp. 301-357.
21. Part III, Inform. Sci., vol. 9, pp. 43-80, 1975.
22. Mentzas, G., Apostolou, D., Abecker, A., Young, R. Knowledge Asset Management, Springer, 2003.