Naslov
Development and implementation of metrics for information security risk assessment

Autori
Sajko, Mario

Vrsta, podvrsta i kategorija rada
Radovi u zbornicima skupova, cjeloviti rad (in extenso), znanstveni

Izvornik
IIS2006 Conference Proceedings / Aurer, Boris ; Bača Miroslav - Varaždin : Fakultet organizacije i informatike Sveučilišta u Zagrebu, 2006, 297-305

Skup
17th International Conference Information and Intelligent System

Mjesto i datum
Varaždin, Hrvatska, 20.09.2006. - 22.09.2006

Vrsta sudjelovanja
Predavanje

Vrsta recenzije
Međunarodna recenzija

Ključne riječi
informacijska sigurnost; procjena rizika; metrike
(Risk assessment; security metrics)

Sažetak
Risk assessment is an unavoidable method for information security improvement. Despite that in the assessment process we can find some hesitations. One of them deals with connections among individual metrics for risk assessment with different areas of IT infrastructure into an integral system and its modelling. The problem can be dissolved combining different forms of metrics values, establishing the kind of transforming input data about security state into information about risk value and coordinating risk function with security goal and information resource features. How to develop such a system which will handle differences among IT resources and generate information about risk value in a form which is suitable for decision making is a goal of this paper.

Izvorni jezik
Engleski

Znanstvena područja
Informacijske i komunikacijske znanosti

POVEZANOST RADA