Quantifying Security Threats and Their Impact

Conference · Thu Jan 01 00:00:00 EST 2009

OSTI ID:962165

Aissa, Anis Ben ^[1]; Abercrombie, Robert K ^[2]; Sheldon, Frederick T ^[2]; Mili, Ali ^[3]

---

1. University of Tunis, Belvedere, Tunisia
2. ORNL
3. New Jersey Insitute of Technology

In earlier works, we present a computational infrastructure that allows an analyst to estimate the security of a system in terms of the loss that each stakeholder stands to sustain as a result of security breakdowns. In this paper we illustrate this infrastructure by means of a sample example involving an e-commerce application.

• Research Organization: Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States). National Center for Computational Sciences (NCCS)
• Sponsoring Organization: Work for Others (WFO)
• DOE Contract Number: DE-AC05-00OR22725
• OSTI ID: 962165
• Resource Relation: Conference: 5th Annual Cyber Security and Information Intelligence Research Workshop (CSIIRW09) - Theme: Cyber Security and Information Intelligence Challenges and Strategies, Oak Ridge, TN, USA, 20090413, 20090415
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING
99 GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE
SECURITY
RISK ASSESSMENT
SYSTEMS ANALYSIS
COMPUTERIZED SIMULATION
Cyber Security Metrics
Risk Management
Information Security
Mean Failure Cost (MFC)
Algorithms
Measurement
Performance
Design
Economics
Reliability
Experimentation
Security
Theory
Verification