Synopsis of Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission Value

Abercrombie, Robert K.; Sheldon, Frederick T.; Mili, Ali

doi:10.1109/HASE.2008.61

Synopsis of Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission Value

Conference · Mon Dec 01 04:00:00 EST 2008

DOI:https://doi.org/10.1109/HASE.2008.61· OSTI ID:946765

^[1]; Sheldon, Frederick T. ^[1]; Mili, Ali ^[2]

ORNL
New Jersey Institute of Technology

Information security continues to evolve in response to disruptive changes with a persistent focus on information-centric controls and a healthy debate about balancing endpoint and network protection, with the goal of improved enterprise and business risk management. Economic uncertainty, intensively collaborative work styles, virtualization, increased outsourcing and ongoing compliance pressures require careful consideration and adaptation of a balanced approach. The Cyberspace Security Econometrics System (CSES) provides a measure of reliability, security and safety of a system that accounts for the criticality of each requirement as a function of one or more stakeholders' interests in that requirement. For a given stakeholder, CSES reflects the variance that mayexist among the stakes one attaches to meeting each requirement. This paper summarizes the basis, objectives and capabilities for the CSES includinginputs/outputs as well as the structural underpinnings.

View Conference

Research Organization:: Oak Ridge National Laboratory (ORNL), Oak Ridge, TN (United States)

Sponsoring Organization:: USDOE

DOE Contract Number:: AC05-00OR22725

OSTI ID:: 946765

Country of Publication:: United States

Language:: English

References (15)

Sixth workshop on software quality Boehm, Barry; Chulani, Sunita; Verner, June Companion of the 13th international conference on Software engineering - ICSE Companion '08 https://doi.org/10.1145/1370175.1370234	conference	January 2008
Financially informed requirements prioritization Cleland-Huang, J.; Denne, M. Proceedings. 27th International Conference on Software Engineering, 2005. ICSE 2005. https://doi.org/10.1109/ICSE.2005.1553675	conference	May 2005
Value-based software engineering: a case study Boehm, B. Computer, Vol. 36, Issue 3 https://doi.org/10.1109/MC.2003.1185215	journal	March 2003
Distributed priority ranking of strategic preliminary requirements for management information systems in economic organizations Sobczak, Andrzej; Berry, Daniel M. Information and Software Technology, Vol. 49, Issue 9-10 https://doi.org/10.1016/j.infsof.2006.10.006	journal	September 2007
Developing a SSE-CMM-based security risk assessment process for patient-centered healthcare systems Huang, LiGuo; Bai, Xu; Nair, Suku Proceedings of the 6th international workshop on Systems development in SOA environments - WoSQ '08 https://doi.org/10.1145/1370099.1370103	conference	January 2008
Evaluating security controls based on key performance indicators and stakeholder mission Sheldon, Frederick T.; Abercrombie, Robert K.; Mili, Ali Proceedings of the 4th annual workshop on Cyber security and informaiton intelligence research developing strategies to meet the cyber security and information intelligence challenges ahead - CSIIRW '08 https://doi.org/10.1145/1413140.1413188	conference	January 2008
Designing an economic-driven evaluation framework for process-oriented software technologies Mutschler, Bela; Bumiller, Johannes; Reichert, Manfred Proceedings of the 28th international conference on Software engineering https://doi.org/10.1145/1134285.1134442	conference	May 2006
A view of 20th and 21st century software engineering Boehm, Barry Proceedings of the 28th international conference on Software engineering https://doi.org/10.1145/1134285.1134288	conference	May 2006
Methodology for Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission Sheldon, F. T.; Abercrombie, R. K.; Mili, A. 42. Hawaii International Conference on System Sciences https://doi.org/10.1109/HICSS.2009.308	conference	January 2009
A value-based approach for understanding cost-benefit trade-offs during automated software traceability Egyed, Alexander; Biffl, Stefan; Heindl, Matthias Proceedings of the 3rd international workshop on Traceability in emerging forms of software engineering - TEFSE '05 https://doi.org/10.1145/1107656.1107658	conference	January 2005
Measuring Reliability as a Mean Failure Cost Mili, Ali; Sheldon, Frederick 10th IEEE High Assurance Systems Engineering Symposium (HASE'07) https://doi.org/10.1109/HASE.2007.42	conference	November 2007
Value-based software engineering Boehm, Barry ACM SIGSOFT Software Engineering Notes, Vol. 28, Issue 2 https://doi.org/10.1145/638750.638775	journal	March 2003
A case study on value-based requirements tracing Heindl, Matthias; Biffl, Stefan Proceedings of the 10th European software engineering conference held jointly with 13th ACM SIGSOFT international symposium on Foundations of software engineering - ESEC/FSE-13 https://doi.org/10.1145/1081706.1081717	conference	January 2005
Balanced Decision Making in Software Engineering--General Thoughts and a Concrete Example from Industry Omasreiter, Hannes 2007 First International Workshop on the Economics of Software and Computation https://doi.org/10.1109/ESC.2007.3	conference	May 2007
Value-Based Software Engineering Biffl, Stefan; Aurum, Aybüke; Boehm, Barry https://doi.org/10.1007/3-540-29263-2	book	January 2006

Similar Records

Methodology for Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission

Conference · Wed Dec 31 23:00:00 EST 2008 · OSTI ID:946487

Cyberspace Security Econometrics System (CSES) - U.S. Copyright TXu 1-901-039

Book · Tue Dec 31 23:00:00 EST 2013 · OSTI ID:1143596

Cyberspace Security Econometrics System (CSES)

Software · Fri Jul 27 00:00:00 EDT 2012 · OSTI ID:1231723

Related Subjects

97 MATHEMATICS AND COMPUTING
99 GENERAL AND MISCELLANEOUS
COMPUTER NETWORKS
Cyber Security
Cyber Security Controls
ECONOMETRICS
INFORMATION SYSTEMS
Risk Assessment
Risk Management
SECURITY

Synopsis of Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission Value

Citation Formats

References (15)

Similar Records

Related Subjects