Decision support for Cybersecurity risk planning

Decision support for Cybersecurity risk planning

0.00 Avg rating0 Votes
Article ID: iaor20115286
Volume: 51
Issue: 3
Start Page Number: 493
End Page Number: 505
Publication Date: Jun 2011
Journal: Decision Support Systems
Authors: , , ,
Keywords: financial, cost benefit analysis, decision, heuristics: genetic algorithms, risk, manufacturing industries
Abstract:

Security countermeasures help ensure the confidentiality, availability, and integrity of information systems by preventing or mitigating asset losses from Cybersecurity attacks. Due to uncertainty, the financial impact of threats attacking assets is often difficult to measure quantitatively, and thus it is difficult to prescribe which countermeasures to employ. In this research, we describe a decision support system for calculating the uncertain risk faced by an organization under cyber attack as a function of uncertain threat rates, countermeasure costs, and impacts on its assets. The system uses a genetic algorithm to search for the best combination of countermeasures, allowing the user to determine the preferred tradeoff between the cost of the portfolio and resulting risk. Data collected from manufacturing firms provide an example of results under realistic input conditions.

Reviews

Required fields are marked *. Your email address will not be published.