Information Security Risk Assessment Model Based on OCTAVE for E-Government

2010 ◽  
Author(s):  
Xin-ming Chen ◽  
Ning Wen
Keyword(s):  
Risk Assessment ◽  
Information Security ◽  
Assessment Model ◽  
Risk Assessment Model ◽  
Security Risk ◽  
Model Based ◽  
Information Security Risk ◽  
Security Risk Assessment

scholarly journals Information Security Risk Assessment Model Based on Computing with Words

MENDEL ◽  
2017 ◽  
Vol 23 (1) ◽  
pp. 119-124
Author(s):  
Oleg Tymchuk ◽  
Maryna Iepik ◽  
Artyom Sivyakov
Keyword(s):  
Risk Factors ◽  
Risk Assessment ◽  
Information Security ◽  
Assessment Model ◽  
Computing With Words ◽  
Risk Assessment Model ◽  
It Services ◽  
Security Risk ◽  
Information Security Risk ◽  
Security Risk Assessment

The basis for company IT infrastructure security is information security risks assessment of IT services. The increased complexity, connectivity and rapid changes occurring in IT services make it impossible to apply traditional models of quantitative/qualitative risk assessment. Existing quantitative assessment models are time-consuming, at the same time, qualitative assessment models do not take into account the subjective expert assessments and the uncertainty of risk factors. This paper presents the new information security risk assessment model for IT services based on computing with words. The model methodology is based on OWASP risk rating methodology for web applications. To evaluate risk factors, it is proposed to use dictionary consisting of 16/32 granular terms (words). Problems of uncertainty in perceptual assessments of risk factors are taken into account using methods of the theory of discrete interval type-2 fuzzy sets and systems.

Sign in / Sign up

Export Citation Format

Share Document