Decision support for Cybersecurity risk planning

作者：Rees Loren Paul; Deane Jason K^*; Rakes Terry R; Baker Wade H

来源：Decision Support Systems, 2011, 51(3): 493-505.

DOI：10.1016/j.dss.2011.02.013

• IT security
• Decision support
• Genetic algorithms
• Fuzzy sets

Security countermeasures help ensure the confidentiality, availability, and integrity of information systems by preventing or mitigating asset losses from Cybersecurity attacks. Due to uncertainty, the financial impact of threats attacking assets is often difficult to measure quantitatively, and thus it is difficult to prescribe which countermeasures to employ. In this research, we describe a decision support system for calculating the uncertain risk faced by an organization under cyber attack as a function of uncertain threat rates, countermeasure costs, and impacts on its assets. The system uses a genetic algorithm to search for the best combination of countermeasures, allowing the user to determine the preferred tradeoff between the cost of the portfolio and resulting risk. Data collected from manufacturing firms provide an example of results under realistic input conditions.

• 出版日期2011-6
• 单位美国弗吉尼亚理工大学(Virginia Tech)