Decision support for Cybersecurity risk planning

Decision Support Systems

Volumn 51, Issue 3, 2011, Pages 493-505

  Rees, Loren Paul ^a   Deane, Jason K ^a   Rakes, Terry R ^a   Baker, Wade H ^b  

^a PAMPLIN COLLEGE OF BUSINESS   (United States)

^b Verizon Business Internet Engineering Organization   (United States)

Author keywords

Decision support; Fuzzy sets; Genetic algorithms; IT security

Indexed keywords

CYBER SECURITY; CYBER-ATTACKS; DECISION SUPPORTS; FINANCIAL IMPACTS; IT SECURITY; MANUFACTURING FIRMS; RISK PLANNING; SECURITY COUNTERMEASURES; SYSTEM USE;

ARTIFICIAL INTELLIGENCE; AVAILABILITY; COMPUTER CRIME; FUZZY SETS; GENETIC ALGORITHMS;

DECISION SUPPORT SYSTEMS;

EID: 79955908568     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2011.02.013     Document Type: Article

References (42)

1. C.J. Alberts, and A.J. Dorofee Managing Information Security Risks: The OCTAVE Approach 2002 Addison Wesley Professional
2. H. Aytug, M. Khouja, and F.E. Vergara Use of genetic algorithms to solve production and operations management problems: a review International Journal of Production Research 41 2003 3955 4099
3. W.H. Baker, L.P. Rees, and P.S. Tippett Necessary measures: metric-driven information security risk assessment and decision making Communications of the ACM 50 10 October 2007 101 106 (Pubitemid 47505006)
4. W.H. Baker, and L. Wallace Is information security under control? IEEE Security & Privacy 2007 24 32 January/February 2007
5. J.E. Beauregard, Modeling Information Assurance, Master's Thesis, Air Force Institute of Technology (2001).
6. S. Berinato The State of Information Security 2003 CIO Magazine 17 2 2003 1 3
7. S. Bistarelli, F. Fioravanti, and P. Peretti Using CP-nets as a guide for countermeasure selection Proceedings of the 2007 ACM Symposium on Applied Computing (Seoul, Korea, 2007) 2007 300 304 (Pubitemid 47568302)
8. D. Brewer Risk assessment models and evolving approaches http://www.gammassl.co.uk/topics/IAAC.htm 2006 (accessed December 22, 2006)
9. D.L. Buckshaw, G.S. Parnell, W.L. Unkenholz, D.L. Parks, J.M. Wallner, and O.S. Saydjari Mission oriented risk and design analysis of critical information systems Military Operations Research 10 2 2005 19 38 (Pubitemid 43264848)
10. H. Cavusoglu, S. Raghunathan, and H. Cavusoglu Configuration of and interaction between information security technologies: the case of firewalls and intrusion detection systems Information Systems Research 20 2009 198 217
11. U. Cherubini, and G. Della Lunga Fuzzy value-at-risk: accounting for market liquidity Economic Notes by Banca Monte dei Pascha di Siena SpA 30 2 2001 293 312 (Pubitemid 33755896)
12. J.K. Deane, C.T. Ragsdale, T.R. Rakes, and L.P. Rees Managing supply chain risk and disruption from IT security incidents Operations Management Research 2 1 2009 4 12
13. W.M. Dong, and F.S. Wong Fuzzy weighted averages and implementation of the extension principle Fuzzy Sets and Systems 21 1987 183 199
14. D. Dumitrescu, B. Lazzerini, L.C. Jain, and A. Dumitrescu Evolutionary Computation 2000 CRC Press LLC Boca Raton, FL
15. M. Egan The Executive Guide to Information Security 2005 Symantec Press Indianapolis, IN
16. Elsevier, Decision Support Systems, http://www.sciencedirect.com/science/ journal/01679236, accessed February 13, 2010.
17. GAO/AIMD-00-33, Information Security Risk Assessment: Practices of Leading Organizations (United States General Accounting Office, 1999).
18. D.E. Goldberg Genetic Algorithms in Search, Optimization and Machine Learning 1989 Addison-Wesley Reading, MA
19. K. Haslum, A. Abraham, and S. Knapskog DIPS: a framework for distributed intrusion prediction and prevention using hidden Markov models and online fuzzy risk assessment Third International Symposium on Information Assurance and Security (Manchester, U.K., 2007) 2007 183 188
20. J. Holland Adaptation in Natural and Artificial Systems: An Introductory Analysis with Applications to Biology, Control, and Artificial Intelligence 1975 University of Michigan Press Ann Arbor
21. IDC, Worldwide and U.S. security services 2006-2010 forecast, http://www.idc.com/getdoc.jsp?containerId=200926 (accessed December 22, 2006).
22. N. Karnik, and J. Mendel Centroid of a type-2 fuzzy set Information Sciences 132 2001 195 220 (Pubitemid 32273094)
23. E. Kujawski, and G.A. Miller Quantitative risk-based analysis for military counterterrorism systems Systems Engineering 10 4 2007 273 289 (Pubitemid 350229691)
24. C. Lin, and P. Hsieh A fuzzy decision support systems for strategic portfolio management Decision Support Systems 38 2004 383 398
25. Lohr, Steve, The New York Times, Companies Fight Endless War Against Computer Attacks, January 18, 2010, http://www.nytimes.com/2010/01/18/ technology/internet/18defend.html, accessed February 14, 2010.
26. E. Ngai, and F. Wat Fuzzy decision support system for risk analysis in E-commerce development Decision Support Systems 40 2005 235 255 (Pubitemid 40266063)
27. N. Pfluger, J. Yen, and R. Langari A defuzzification strategy for a fuzzy controller employing prohibitive information in command formulation Proceedings of the IEEE International Conference on Fuzzy Systems (San Diego, CA, 1992) 1992 717 723 (Pubitemid 23590980)
28. PITAC, Report to the President - Cyber Security: A Crisis of Prioritization (President's Information Technology Advisory Council, National Coordination Office for Information Technology Research and Development, Arlington, VA, 2005).
29. G.V. Prasad, Y. Dhanalakshmi, V.V. Kumar, and I.R. Babu Modeling an intrusion detection system using data mining and genetic algorithms based on fuzzy logic International Journal of Computer Science and Network Security 8 7 2008 319 325
30. S. Radha, and M.S. Jayapriya Security enhancement in the NTP protocol using fuzzy techniques International Workshop on Wireless Ad-hoc Networks (London, 2005) 2005
31. T.R. Rakes, L.P. Rees, and J.K. Deane Fuzzy representations of information-technology security threat-countermeasure effectiveness Proceedings of the SEINFORMS Meeting (Myrtle Beach, SC, 2006) 2006 428 437
32. C.R. Reeves Modern Heuristic Techniques for Combinatorial Problems 1993 Blackwell Scientific Oxford
33. T. Runkler Selection of appropriate defuzzification methods using application specific properties IEEE Transactions on Fuzzy Systems 5 1 1997 72 79 (Pubitemid 127772312)
34. A.S. Sodiya, S.A. Onashoga, and B.A. Oladunjoye Threat modeling using a fuzzy logic paradigm Issues in Informing Science and Information Technology 4 2007 53 61
35. S. Song, K. Hwang, and M. Macwan Fuzzy trust integration for security enforcement in grid computing IFIP International Symposium on Network and Parallel Computing (Wuhan, China, 2004) 2004
36. B. Van de Walle, and A. Rutkowski A fuzzy decision support system for IT service continuity threat assessment Decision Support Systems 42 2006 1931 1943 (Pubitemid 44649338)
37. L.A. Zadeh Fuzzy sets Information and Control 8 1965 338 353
38. L.A. Zadeh Outline of a new approach to the analysis of complex systems and decision processes Transactions on Systems, Man and Cybernetics, SMC-3 1973 28 44
39. L.A. Zadeh The concept of a linguistic variable and its application to approximate reasoning Information Science 8 1975 199 249
40. L.A. Zadeh Fuzzy sets as a basis for a theory of possibility Fuzzy Sets and Systems 1 1978 3 28
41. L.A. Zadeh A theory of approximate reasoning Machine Intelligence 9 1979 149 194
42. D. Zhao, J. Wang, J. Wu, and J. Ma Using fuzzy logic and entropy theory to risk assessment of the information security Proceedings of the Fourth International Conference on Machine Learning and Cybernetics, (Guangzhou, China, 2005) 2005 2448 2453 (Pubitemid 41734335)