Search: (WFRF:(Hacks Simon 1988 )) >
Yet another cyberse...
Yet another cybersecurity risk assessment framework
-
- Ekstedt, Mathias, 1975- (author)
- KTH,Nätverk och systemteknik
-
- Afzal, Zeeshan, 1991- (author)
- KTH,Nätverk och systemteknik
-
- Mukherjee, Preetam (author)
- KTH,Nätverk och systemteknik,Digital University Kerala, Thiruvananthapuram, India
-
show more...
-
- Hacks, Simon, 1988- (author)
- Stockholms universitet,Institutionen för data- och systemvetenskap,Stockholm University, Stockholm, Sweden
-
- Lagerström, Robert, 1981- (author)
- KTH,Nätverk och systemteknik
-
show less...
-
(creator_code:org_t)
- Springer Nature, 2023
- 2023
- English.
-
In: International Journal of Information Security. - : Springer Nature. - 1615-5262 .- 1615-5270. ; :22, s. 1713-1729
- Related links:
-
https://doi.org/10.1...
-
show more...
-
https://urn.kb.se/re...
-
https://doi.org/10.1...
-
https://urn.kb.se/re...
-
show less...
Abstract
Subject headings
Close
- IT systems pervade our society more and more, and we become heavily dependent on them. At the same time, these systems are increasingly targeted in cyberattacks, making us vulnerable. Enterprise and cybersecurity responsibles face the problem of defining techniques that raise the level of security. They need to decide which mechanism provides the most efficient defense with limited resources. Basically, the risks need to be assessed to determine the best cost-to-benefit ratio. One way to achieve this is through threat modeling; however, threat modeling is not commonly used in the enterprise IT risk domain. Furthermore, the existing threat modeling methods have shortcomings. This paper introduces a metamodel-based approach named Yet Another Cybersecurity Risk Assessment Framework (Yacraf). Yacraf aims to enable comprehensive risk assessment for organizations with more decision support. The paper includes a risk calculation formalization and also an example showing how an organization can use and benefit from Yacraf.
Subject headings
- NATURVETENSKAP -- Data- och informationsvetenskap -- Systemvetenskap, informationssystem och informatik (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Information Systems (hsv//eng)
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
- TEKNIK OCH TEKNOLOGIER -- Elektroteknik och elektronik -- Datorsystem (hsv//swe)
- ENGINEERING AND TECHNOLOGY -- Electrical Engineering, Electronic Engineering, Information Engineering -- Computer Systems (hsv//eng)
Keyword
- Threat modeling
- Enterprise IT risk
- Risk assessment
- Attack tree
- data- och systemvetenskap
- Computer and Systems Sciences
Publication and Content Type
- ref (subject category)
- art (subject category)
Find in a library
To the university's database