Evaluating Confidentiality Impact in Security Risk Scoring Models
DOI: https://doi.org/10.14569/IJACSA.2016.071221
Abstract
Risk scoring models assume that confidentiality evaluation is based on user estimations. Confidentiality evaluation incorporates the impacts of various factors including systems' technical configuration, on the processes relating to users' confidentiality. The assumption underlying this research is that system users are not capable of estimating systems' confidentiality since they lack the knowledge on the technical structure. According to the proposed model, systems' confidentiality is calculated using technical information of systems' components. The proposed model evaluates confidentiality based on quantitative metrics rather than qualitative estimates which are currently being used. Frameworks' presentation includes system design, an algorithm calculating confidentiality measures and an illustration of risk scoring computations.
Keywords
information security
risk management
continuous monitoring
vulnerability
confidentiality
risk assessment
access control
authorization system
How to Cite this Article
Eli Weintraub. "Evaluating Confidentiality Impact in Security Risk Scoring Models". International Journal of Advanced Computer Science and Applications (IJACSA), Vol. 7, No. 12, 2016. https://doi.org/10.14569/IJACSA.2016.071221
BibTeX
@article{Weintraub2016,
title = {Evaluating Confidentiality Impact in Security Risk Scoring Models},
journal = {International Journal of Advanced Computer Science and Applications},
volume = {7},
number = {12},
year = {2016},
publisher = {The Science and Information Organization},
author = {Eli Weintraub},
doi = {10.14569/IJACSA.2016.071221},
url = {https://doi.org/10.14569/IJACSA.2016.071221}
}Open Access — licensed under a Creative Commons Attribution 4.0 International License. Unrestricted use, distribution, and reproduction in any medium, even commercially, as long as the original work is properly cited.
