An abstract reduction model for computer security risk

IFIP Advances in Information and Communication Technology

Volumn 147, Issue , 2004, Pages 1-16

  Hamdi, Mohamed ^a   Boudriga, Noureddine ^a  

^a UNIVERSITY OF CARTHAGE   (Tunisia)

Author keywords

Algebraic specifications; Rewriting systems; Risk analysis equation; Risk management

Indexed keywords

ALGEBRA; COST BENEFIT ANALYSIS; DECISION MAKING; RISK ASSESSMENT; RISK MANAGEMENT; SECURITY OF DATA;

ABSTRACT REDUCTION; ALGEBRAIC SIGNATURES; ALGEBRAIC SPECIFICATIONS; COMPUTER NETWORK ENVIRONMENT; COMPUTER SECURITY RISKS; OPTIMAL SECURITY; REWRITING SYSTEMS; SECURITY RISKS;

RISK ANALYSIS;

EID: 84902485551     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/1-4020-8143-x_1     Document Type: Conference Paper

References (9)

1. Alberts, C.J., Dorofee, A.J. (2002).Managing Information Security Risks: the OCTAVE Approach, Addison Wesley Professional, ISBN: 0321118863.
2. Ben Cherifa A., Lescanne, P. (1987). Termination of Rewriting Systems by Polynomial Interpretations and its Implementation, Science of Computer Programming, 9(2):137-160.
3. CIaßen I., Ehrig H., Wolz D. Aigebraic Specification Techniques and Tools for Software Development: the ACT Approach, AMAST Series in Computing (1), ISBN: 981-02-1227-5.
4. Goguen, J.A., Malcolm, G. (2000). Software Engineering with OBJ: Aigebraix Spccification in Action, Kluwer Academic Publishers, Boston, ISBN: 0-7923-7757-5.
5. Hamdi, M., Boudriga, N. (2003). Aigebraic Specification of Network Security Risk Management, First ACM Workshop on Formal Methods in Security Engineering, Washington D.C.
6. Loeckx J., Ehrich H-D., Wolf, M. "Specification of Abstract Data Types," Wiley and Teubner, ISBN: 0-471-95067-X.
7. Stonebumer G., Grogen A., Fering, A. (2002). Risk Management Guide for Information Technology Systems, National Institute for Standards and Technology, Special Publication 800-30.
8. A Guide to Risk Management and Safeguard Selection for ITSystems, Govemment of Canada, Communications Security Establishment, January 1996.
9. Information Security Risk Assessment: Practices of Leading Organizations, United States General Accounting Office, GAOIAIMD-00-33, November 1999.