Risk Assessment Methodology Based on the NISTIR 7628 Guidelines

Conference · Tue Jan 01 00:00:00 EST 2013

OSTI ID:1072138

Abercrombie, Robert K ^[1]; Sheldon, Frederick T ^[1]; Hauser, Katie R ^[1]; Lantz, Margaret W ^[1]; Mili, Ali ^[2]

---

1. ORNL
2. New Jersey Insitute of Technology

Earlier work describes computational models of critical infrastructure that allow an analyst to estimate the security of a system in terms of the impact of loss per stakeholder resulting from security breakdowns. Here, we consider how to identify, monitor and estimate risk impact and probability for different smart grid stakeholders. Our constructive method leverages currently available standards and defined failure scenarios. We utilize the National Institute of Standards and Technology (NIST) Interagency or Internal Reports (NISTIR) 7628 as a basis to apply Cyberspace Security Econometrics system (CSES) for comparing design principles and courses of action in making security-related decisions.

• Research Organization: Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
• Sponsoring Organization: Work for Others (WFO)
• DOE Contract Number: DE-AC05-00OR22725
• OSTI ID: 1072138
• Resource Relation: Conference: Hawaii International Conference on System Sciences (HICSS-46), Wailea, Maui, HI, USA, 20130107, 20130110
• Country of Publication: United States
• Language: English

Related Subjects

Cyber Security Metrics
Risk Management
Information Security
Algorithms
Measurement
Performance
Design
Economics
Reliability
Experimentation
Security
Theory
Verification