A Security Risk Analysis Model for Information Systems

Abstract. Information security is a crucial technique for an organization to survive in these days. However, there is no integrated model to assess the security risk quantitatively and optimize its resources to protect organization information and assets effectively. In this paper, an integrated, quantitative risk analysis model is proposed including asset, threat and vulnerability evaluations by adapting software risk management techniques. It is expected to analyze security risk effectively and optimize resources to mitigate the risk.

• Type: Conference
• Year: 2004
• Where: ASIASIM
• Authors: Hoh Peter In, Young-Gab Kim, Taek Lee, Chang-Joo Moon, Yoon-Jung Jung, In-Jung Kim
• Keywords: ASIASIM 2004, Risk Analysis Model, Risk Management Techniques, Security Risk, Simulation