Decision support for Cybersecurity risk planning

Security countermeasures help ensure the confidentiality, availability, and integrity of information systems by preventing or mitigating asset losses from Cybersecurity attacks. Due to uncertainty, the financial impact of threats attacking assets is often difficult to measure quantitatively, and thu...

Full description

Saved in:
Bibliographic Details
Published in:Decision Support Systems 2011-06, Vol.51 (3), p.493-505
Main Authors: Rees, Loren Paul, Deane, Jason K., Rakes, Terry R., Baker, Wade H.
Format: Article
Language:English
Subjects:
Applied sciences
Availability
Computer science
control theory
systems
Costs
Countermeasures
Cybersecurity
Decision support
Decision support systems
Decision theory. Utility theory
Exact sciences and technology
Fuzzy sets
Genetic algorithms
Information systems
Information systems. Data bases
IT security
Mathematical analysis
Memory and file management (including protection and security)
Memory organisation. Data processing
Military technology
Network security
Operational research and scientific management
Operational research. Management science
Reliability theory. Replacement problems
Risk
Risk management
Software
Studies
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Security countermeasures help ensure the confidentiality, availability, and integrity of information systems by preventing or mitigating asset losses from Cybersecurity attacks. Due to uncertainty, the financial impact of threats attacking assets is often difficult to measure quantitatively, and thus it is difficult to prescribe which countermeasures to employ. In this research, we describe a decision support system for calculating the uncertain risk faced by an organization under cyber attack as a function of uncertain threat rates, countermeasure costs, and impacts on its assets. The system uses a genetic algorithm to search for the best combination of countermeasures, allowing the user to determine the preferred tradeoff between the cost of the portfolio and resulting risk. Data collected from manufacturing firms provide an example of results under realistic input conditions.
ISSN:0167-9236
1873-5797
DOI:10.1016/j.dss.2011.02.013