Combining disparate information sources when quantifying operational security

WMSCI 2005 - The 9th World Multi-Conference on Systemics, Cybernetics and Informatics, Proceedings

Volumn 1, Issue , 2005, Pages 228-235

  Houmb, Siv Hilde ^a  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

Author keywords

Bayesian Belief Network (BBN); Quantitative security assessment; Trade off analysis

Indexed keywords

ASPECT-ORIENTED; CRITICAL SYSTEMS; EXPERT OPINION; INFORMATION SOURCES; OPERATIONAL SECURITY; QUANTITATIVE ESTIMATION; RISK-DRIVEN DEVELOPMENT; SECURITY ASSESSMENT; SECURITY ATTRIBUTES; SECURITY RISKS; TRADE-OFF ANALYSIS;

BAYESIAN NETWORKS; COST EFFECTIVENESS; COSTS; CYBERNETICS; DIGITAL STORAGE; ESTIMATION; INFORMATION SCIENCE; RISK PERCEPTION;

COST BENEFIT ANALYSIS;

EID: 84867352091     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. EP-27046-ACTIVE, Final Prototype and User Manual, D4.2.2, Ver. 2.0, 2001-02-22., 2001.
2. R. M. Cooke. Experts in Uncertainty: Opinion and Subjective Probability in Science. Oxford University Press, 1991.
3. G. Georg, R. France, and I. Ray. An aspect-based approach to modeling security concerns. In Workshop on Critical Systems Development with UML (CSDUML '02). Dresden, Germany, October 2002.
4. B. A. Gran. The use of Bayesian Belief Networks for combining disparate sources of information in the safety assessment of software based systems. Doctoral of engineering thesis 2002:35, Department of Mathematical Science, Norwegian University of Science and Technology, 2002.
5. S. H. Houmb, G. Georg, R. France, J. Bieman, and J. Jürjens. Cost-benefit trade-off analysis using bbn for aspect-oriented risk-driven development. Accepted for the International Conference on Engineering of Complex Computer System (ICECCS2005) in Shanghai, China, 16-20 June 2005.
6. S. H. Houmb, G. Georg, R. France, and D. Matheson. Using aspects to manage security risks in risk-driven development. In 3rd International Workshop on Critical Systems Development with UML, number TUM-I0415, pages 71-84. TUM, 2004.
7. S. H. Houmb, O. A. Johnsen, and T. Stalhane. Combining Disparate Information Sources when Quantifying Security Risks. In Proceeding of SCI 2004, RMCI 2004, Orlando, July 2004, 2004.
8. HUGIN: Tool made by Hugin Expert a/s, Alborg, Denmark, 2004. http://www.hugin.dk.
9. F. Jensen. An introduction to Bayesian Network. UCL Press, University College London, 1996.
10. S. L. Lauritzen and D. J. Spiegelhalter. Local computations with probabilities on graphical structures and their application to expert systems (with discussion). Journal of the Royal Statistical Society, Series B 50(2): 157-224, 1988.
11. B. Littlewood, S. Brocklehurst, N. Fenton, P. Mellor, S. Page, D. Wright, J. Dobson, McDermid J., and D. Gollmann. Towards operational measures of computer security. Journal of Computer Security, 2:211-229, 1993.
12. K. Øien and P. R. Hokstad. Handbook for performing expert judgment. Technical report, SINTEF, 1998.
13. M. E. Østvang. The honeynet project, Phase 1: Installing and tuning Honeyd using LIDS, 2003. Project assignment, Norwegian University of Science and Technology.
14. J. Pearl. Probabilistic Reasoning in Intelligent Systems: Network for Plausible Inference. Morgan Kaufmann, 1988.
15. L. Spitzner. Honeypot - tracking hackers. Addison-Wesley, 2003.
16. K. Stolen, F. den Braber, T. Dimitrakos, R. Fredriksen, B. A. Gran, S. H. Houmb, Y. C. Stamatiou, and J. Ø. Aagedal. Model-based risk assessment in a component-based software engineering process: The CORAS approach to identify security risks. In F. Barbier, editor, Business Component-Based Software Engineering, pages 189-207. Kluwer, 2002. ISBN: 1-4020-7207-4.
17. The Honeynet Project. The web page for the honeynet project. http://www.honeynet.org/. 15 December 2004.
18. D. Vose. Risk Analysis: A Quantitative Guide. John Wiley & Sons Ltd., 2000.