A multidimensional approach to information security risk management using FMEA and fuzzy theory

International Journal of Information Management

Volumn 34, Issue 6, 2014, Pages 733-740

  Silva, Maisa Mendonç ^a   De Gusmão, Ana Paula Henriques ^a   Poleto, Thiago ^a   Silva, Lúcio Camara E ^a   Costa, Ana Paula Cabral Seixas ^a  

^a FEDERAL UNIVERSITY OF PERNAMBUCO   (Brazil)

Author keywords

FMEA; Fuzzy theory; Information security; Risk management

Indexed keywords

INFORMATION USE; RISK ASSESSMENT; RISK MANAGEMENT; SECURITY OF DATA;

FAILURE MODE AND EFFECTS ANALYSIS; FMEA; FUZZY THEORY; INFORMATION SECURITY RISK MANAGEMENTS; INFORMATION SECURITY RISKS; INFORMATION TECHNOLOGY SYSTEMS; MULTI-DIMENSIONAL APPROACH; SECURE INFORMATION SYSTEMS;

INFORMATION MANAGEMENT;

EID: 84905870552     PISSN: 02684012     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijinfomgt.2014.07.005     Document Type: Article

References (33)

1. S. Abbasbandy Ranking of fuzzy numbers, some recent and new formulas Proceedings of IFSA-EUSFLAT 2009 2009 642 646
2. J.M. Adamo Fuzzy decision trees Fuzzy Sets and Systems 4 3 1980 207 219
3. Y. Bang, D.-Y. Lee, Y.-S. Bae, and J.-H. Ahnc Improving information security management: An analysis of ID-password usage and a new login vulnerability measure International Journal of Information Management 32 2012 409 418
4. R.E. Bellman, and L.A. Zadeh Decision making in a fuzzy environment Management Science 17 1970 4
5. R. Belohlavek, and G.J. Klir Concepts and fuzzy logic 2011 The MIT Press Cambridge MA
6. V. Belton, and T.J. Stewart Multiple criteria decision analysis: An integrated approach 2002 Kluwer Academic Publishers Dordrecht, Netherlands
7. G. Bojadziev, and M. Bojadziev Fuzzy logic for business, finance and management 2nd ed. 2007 World Scientific Publishing Company Inc. River Edge, NJ, USA
8. R. Bojanc, and B.J. Blazic An economic modelling approach to information security risk management International Journal of Information Management 28 2008 413 422
9. M. Brunelli, and J. Mezei How different are ranking methods for fuzzy numbers? A numerical study International Journal of Approximate Reasoning 54 2013 627 639
10. G. Chen, and D. Zhao Model of information security risk assessment based on improved wavelet neural network Journal of Networks 2013 8
11. N.V. Deursen, W.J. Buchanan, and A. Duff Monitoring information security risks within health care Computers & Security 37 2013 31 45
12. D. Dubois, and H. Prade An introduction to fuzzy sets Clinica Chimica Acta 70 1 1998 3 29
13. Y. Geum, Y. Cho, and Y. Park A systematic approach for diagnosing service failure: Service-specific FMEA and grey relational analysis approach Mathematical and Computer Modelling 54 2011 3126 3142
14. Goodman, S.L. (1996). Design for Manufacturability at Midwest Industries, Harvard Business School, February 2, Lecture.
15. K.S. Hoo How much is enough? A risk-management approach to computer security (Working Paper) 2000 Consortium for Research on Information Security and Policy (CRISP), Stanford University Palo Alto, CA
16. A. Kankanhalli, H.-H. Teo, B.C.Y. Tan, and K.-K. Wei An integrative study of information systems security effectiveness International Journal of Information Management 23 2003 139 154
17. M. Li, and M. Tang Information security engineering: A framework for research and practices International Journal of Computers Communications 8 2013 578 587
18. Q.-L. Lin, D.-J. Wand, W.-G. Lin, and H.-C. Liu Human reliability assessment for medical devices based on failure mode and effects analysis and fuzzy linguistic theory Safety Science 62 2014 248 256
19. H.C. Liu, L. Liu, N. Liu, and L.X. Mao Risk evaluation in failure mode and effects analysis with extended VIKOR method under fuzzy environment Expert Systems with Applications 39 2012 12926 12934
20. S. Ozkan, and B. Karabacak Collaborative risk method for information security management practices: A case context within Turkey International Journal of Information Management 30 2010 567 572
21. E.D. Pam, K.X. Li, A. Wall, Z. Yang, and J. Wang A subjective approach for ballast water risk estimation Ocean Engineering 61 2013 66 76
22. S.C. Patel, J.H. Graham, and P.A.S. Ralston Quantitatively assessing the vulnerability of critical information systems: A new method for evaluating security enhancements International Journal of Information Management 28 2008 483 491
23. W. Pedrycz, P. Ekel, and R. Parreiras Fuzzy multicriteria decision-making: Models methods and applications. 2011 John Wiley and Sons
24. R.E. McDemortt, R.J. Mikulak, and M.R. Beauregard The basics of FMEA 2nd ed. 2008 Taylor & Francis Group New York
25. H.J. Rommelfanger Fuzzy decision theory intelligent ways for solving real-world decision problems and for solving information costs G. Della Riccia, R. Kruse, D. Dubois, H.-J. Lenz, Planning based on decision theory Vol. 472 2003 CISM International Centre for Mechanical Sciences
26. D.W. Straub, and W.D. Nance Discovering and disciplining computer abuse in organizations: A field study MIS Quarterly 14 1 1990 45 60
27. J.E. Vinnem, J. Seljelid, S. Haugen, S. Sklet, and T. Aven Generalised methodology for operational risk analysis (Vol. 1) Proceedings of the European safety and reliability conference. ESREL 2007 - Risk, reliability and societal safety 2007 61 68
28. M. Wall, H.R. Pugh, A. Reay, and J. Krol Failure modes, reliability and integrity of floating storage unit (FPSO FSU) turret and swivel systems (Offshore Technology Report, 2001/073) 2002 HSE Books
29. Z. Wang, and E.E. Kerre Reasonable properties for the ordering of fuzzy quantities (I) Fuzzy Sets and Systems 118 3 2001 375 385 (Pubitemid 33592816)
30. E.Y. Yildirim, G. Akalp, S. Aytac, and N. Bayram Factors influencing information security management in small and medium-sized enterprises: A case study from Turkey International Journal of Information Management 31 2011 360 365
31. L.A. Zadeh Fuzzy sets Information and Control 8 1965 338 353
32. L.A. Zadeh The concept of a linguistic variable and its application to approximate reasoning - I Information Sciences 8 3 1975 199 249
33. L.A. Zadeh Fuzzy logic computing with words IEEE Transactions on Fuzzy Systems 4 1996 2