Ontology-based generation of IT-security metrics

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2010, Pages 1833-1839

  Fenz, Stefan ^a  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

Author keywords

compliance; economics; metrics; security

Indexed keywords

COMPLIANCE; CONTROL IMPLEMENTATION; DEGREE OF AUTOMATION; INDUSTRY STANDARDS; INFORMATION SECURITY; IT SECURITY; LEGAL REGULATION; ONTOLOGY-BASED; RESEARCH RESULTS;

ONTOLOGY; REGULATORY COMPLIANCE;

INFORMATION TECHNOLOGY;

EID: 77954700790     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1774088.1774478     Document Type: Conference Paper

References (12)

1. M. D. Aime, A. Atzeni, and P. C. Pomi. The risks with security metrics. In QoP '08: Proceedings of the 4th ACM workshop on Quality of protection, pages 65-70, New York, NY, USA, 2008. ACM.
2. BERR. 2008 information security breaches survey. Technical report, Department for Business Enterprise and Regulatory Reform (BERR), April 2008.
3. BSI. IT Grundschutz Manual, 2004.
4. E. Chew, M. Swanson, K. Stine, N. Bartol, A. Brown, and W. Robinson. Performance measurement guide for information security. NIST Special Publication 800-55, National Institute of Standards and Technology (NIST), July 2008.
5. S. Fenz and A. Ekelhart. Formalizing information security knowledge. In Proceedings of the 4th ACM Symposium on Information, Computer, and Communications Security, pages 183-194, New York, NY, USA, 2009. ACM. 978-1-60558-394-5.
6. ISO/IEC. ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements, 2005.
7. A. Jaquith. Security Metrics: Replacing Fear, Uncertainty, and Doubt. Addison-Wesley, 2007.
8. A. C. Johnston and R. Hale. Improved security trough information security governance. Communications of the ACM, 52(1):126-129, January 2009.
9. K. Julisch. Security compliance: The next frontier in security research. In NSPW '08: Proceedings of the New Security Paradigms Workshop 2008, pages 71-74. ACM, 2008.
10. B. Littlewood, S. Brocklehurst, N. Fenton, P. Mellor, S. Page, and D. Wright. Towards operational measures of computer security. Journal of Computer Security, 2:211-229, 1993.
11. R. Ortalo, Y. Deswarte, and M. Kaaniche. Experiments with quantitative evaluation tools for monitoring operational security. IEEE Transactions on Software Engineering, 25(5):633-650, 1999.
12. W3C. OWL - web ontology language, February 2004.