Towards security effectiveness measurement utilizing risk-based security assurance

Reijo Savola, Heimo Pentikäinen, Moussa Ouedraogo

    Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

    10 Citations (Scopus)

    Abstract

    Systematic and practical approaches to risk-driven operational security evidence help ensure the effectiveness and efficiency of security controls in business-critical applications and services.
    This paper introduces an enhanced methodology to develop security effectiveness metrics that can be used in connection with correctness assurance of security controls.
    This methodology is then applied to an example system: a Push E-mail service.
    The methodology is based on threat and vulnerability analysis, and parallel security requirement and system architecture decomposition.
    Original languageEnglish
    Title of host publicationProceedings of the Information Security for South Africa, ISSA 2010
    PublisherIEEE Institute of Electrical and Electronic Engineers
    Number of pages8
    ISBN (Electronic)978-1-4244-5495-2
    ISBN (Print)978-1-4244-5493-8
    DOIs
    Publication statusPublished - 2010
    MoE publication typeA4 Article in a conference publication
    Event2011 Conference on Information Security for South Africa, ISSA 2011 - Johannesburg, South Africa
    Duration: 15 Aug 201117 Aug 2011

    Conference

    Conference2011 Conference on Information Security for South Africa, ISSA 2011
    Abbreviated titleISSA 2011
    CountrySouth Africa
    CityJohannesburg
    Period15/08/1117/08/11

    Fingerprint Dive into the research topics of 'Towards security effectiveness measurement utilizing risk-based security assurance'. Together they form a unique fingerprint.

    Cite this