Abstract
Information security management is one of the most important issues to be resolved. The key element of this process is risk analysis. The standards are (ISO/IEC 27000, ISO/IEC 31000) based on the complex and time consuming process of defining vulnerabilities and threats for all organisation assets. In the article we present a new approach to analysing the risk of an attack on information systems. We focus on human factor - motivation, and show its relation to hacker profiles, as well as impacts. At the beginning we introduce a new model of motivation-based risk analysis. Then we describe case study illustrating our approach for a simple set of organisation processes. © 2014 IFIP International Federation for Information Processing.
Cite
CITATION STYLE
Niescieruk, A., & Ksiezopolski, B. (2014). Motivation-based risk analysis process for it systems. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 8407 LNCS, pp. 446–455). Springer Verlag. https://doi.org/10.1007/978-3-642-55032-4_45
Register to see more suggestions
Mendeley helps you to discover research relevant for your work.
