Security Risk Vector for Quantitative Asset Assessment Export

@incollection{citeulike:1674373, abstract = {There are standard risk analysis methodologies like GMITS and ISO17799, but new threats and vulnerabilities appear day by day because the IT organizations, its infrastructure, and its environment are changing. Accordingly, the methodologies must evolve in step with the change. Risk analysis methods are generally composed of asset identification, vulnerability analysis, safeguard identification, risk mitigation, and safeguard implementation. As the first process, the asset identification is important because the target scope of risk analysis is defined. This paper proposes a new approach, security risk vector, for evaluating assets quantitatively. A case study is presented.}, author = {Chung, Yoon J. and Kim, Injung and Lee, Namhoon and Lee, Taek and In, Hoh P.}, citeulike-article-id = {1674373}, citeulike-linkout-0 = {http://dx.doi.org/10.1007/11424826_29}, doi = {10.1007/11424826_29}, journal = {Computational Science and Its Applications – ICCSA 2005}, keywords = {asset, risk, security}, pages = {274--283}, posted-at = {2007-09-19 07:54:09}, priority = {5}, title = {Security Risk Vector for Quantitative Asset Assessment}, url = {http://dx.doi.org/10.1007/11424826_29}, year = {2005} }

TY - CHAP ID - citeulike:1674373 L3 - citeulike-article-id:1674373 N2 - There are standard risk analysis methodologies like GMITS and ISO17799, but new threats and vulnerabilities appear day by day because the IT organizations, its infrastructure, and its environment are changing. Accordingly, the methodologies must evolve in step with the change. Risk analysis methods are generally composed of asset identification, vulnerability analysis, safeguard identification, risk mitigation, and safeguard implementation. As the first process, the asset identification is important because the target scope of risk analysis is defined. This paper proposes a new approach, security risk vector, for evaluating assets quantitatively. A case study is presented. JF - Computational Science and Its Applications – ICCSA 2005 EP - 283 TI - Security Risk Vector for Quantitative Asset Assessment SP - 274 KW - asset KW - risk KW - security AU - Chung, Yoon AU - Kim, Injung AU - Lee, Namhoon AU - Lee, Taek AU - In, Hoh PY - 2005/// UR - http://dx.doi.org/10.1007/11424826_29 ER -