搜索条件

清除筛选
筛选: 创建者 Kunapareddy, Vivek 删除限定条件 创建者: Kunapareddy, Vivek 出版者 University of Cincinnati 删除限定条件 出版者: University of Cincinnati

搜索结果

  • Integrating NIST Framework into FAIR model for Quantitative Risk Assessment of Cyber Threats

    Article thumbnail: Integrating NIST Framework into FAIR model for Quantitative Risk Assessment of Cyber Threats
    Type:
    Article
    摘抄:
    As incessant cyber-attacks on organizations increase in complexity and destructiveness with the aim to disrupt services and steal information, proactive measures are critically needed to mitigate these attacks, cyber security risk assessment tops the list of measures. This study provides an overview of cybersecurity risk assessment, various types of frameworks, and the difference between qualitative and quantitative cybersecurity risk assessments. The aim of this early research is the creation of a hybrid system which integrates an existing cybersecurity risk assessment system based on the NIST framework into the Factor Analysis of Information Risk (FAIR) model, an analytic risk assessment model that enables true quantitative measurement. In this study, we propose a hybrid-assessment tool which will be used to describe and compare the impact of using NIST driven values as inputs for the resistance strength to determine the Loss Event Frequent (LEF) and Annual Loss Expectancy (ALE) of a risk scenario as opposed to using experts’ opinion as user inputs for determination of the LEF and ALE values.
    作者:
    Gilany, Yahya; Kunapareddy, Vivek; Bakare, Adeyinka, and Said, Hazem
    提交者:
    Jess Kropczynski
    上传日期:
    05/15/2020
    更改日期:
    05/15/2020
    创建:
    2019-04-11
    证书:
    All rights reserved