Abstract: Risk scoring models assume that confidentiality evaluation is based on user estimations. Confidentiality evaluation incorporates the impacts of various factors including systems' technical configuration, on the processes relating to users' confidentiality. The assumption underlying this research is that system users are not capable of estimating systems' confidentiality since they lack the knowledge on the technical structure. According to the proposed model, systems' confidentiality is calculated using technical information of systems' components. The proposed model evaluates confidentiality based on quantitative metrics rather than qualitative estimates which are currently being used. Frameworks' presentation includes system design, an algorithm calculating confidentiality measures and an illustration of risk scoring computations.

Eli Weintraub, “Evaluating Confidentiality Impact in Security Risk Scoring Models” International Journal of Advanced Computer Science and Applications(IJACSA), 7(12), 2016. http://dx.doi.org/10.14569/IJACSA.2016.071221

@article{Weintraub2016,
title = {Evaluating Confidentiality Impact in Security Risk Scoring Models},
journal = {International Journal of Advanced Computer Science and Applications},
doi = {10.14569/IJACSA.2016.071221},
url = {http://dx.doi.org/10.14569/IJACSA.2016.071221},
year = {2016},
publisher = {The Science and Information Organization},
volume = {7},
number = {12},
author = {Eli Weintraub}
}