Towards solving the data problem in measurement of organizations’ security

Weiß, Steffen; Meyer-Wegener, Klaus

Towards solving the data problem in measurement of organizations’ security

dc.contributor.author	Weiß, Steffen
dc.contributor.author	Meyer-Wegener, Klaus
dc.contributor.editor	Alkassar, Ammar
dc.contributor.editor	Siekmann, Jörg
dc.date.accessioned	2019-04-03T13:29:13Z
dc.date.available	2019-04-03T13:29:13Z
dc.date.issued	2008
dc.description.abstract	Awareness of security has risen during the last years. As a result, the question of adequate protection against security risks increased, too. Management wants to decide whether and how to invest in this protection. As a result, quantitative statements about information-security risks are needed. Existing approaches in this domain either rely on guessed data or do not answer the question in a quantitative way. We think that this is due to the fact that no approach separates information that can be provided by a central organization (e.g. known attacks, available controls, and a control’s probability of protection) from information which must be provided individually (e.g. the controls installed). We have developed an approach that employs this separation and allows quantitative assessment of security with the help of a model. This model is presented here with a special look at the separation.	en
dc.identifier.isbn	978-3-88579-222-2
dc.identifier.pissn	1617-5468
dc.identifier.uri	https://dl.gi.de/handle/20.500.12116/21498
dc.language.iso	en
dc.publisher	Gesellschaft für Informatik e. V.
dc.relation.ispartof	SICHERHEIT 2008 – Sicherheit, Schutz und Zuverlässigkeit. Beiträge der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI)
dc.relation.ispartofseries	Lecture Notes in Informatics (LNI) - Proceedings, Volume P-128
dc.title	Towards solving the data problem in measurement of organizations’ security	en
dc.type	Text/Conference Paper
gi.citation.endPage	472
gi.citation.publisherPlace	Bonn
gi.citation.startPage	461
gi.conference.date	2.- 4. April 2008
gi.conference.location	Saarbrücken
gi.conference.sessiontitle	Regular Research Papers

Dateien

Originalbündel

1 - 1 von 1

Name:: 461.pdf
Größe:: 921.21 KB
Format:: Adobe Portable Document Format

Herunterladen

Sammlungen

P128 - Sicherheit 2008 – Sicherheit, Schutz und Zuverlässigkeit. Beiträge der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI)