NDLI: Adaptability infrastructure for bridging IT security evaluation and options theory

Please wait, while we are loading the content...

Research and education activities of the department of security of information technologies of taganrog institute of technology of the southern federal university in the field of information security

Pure e-learning course in information security

Modeling network security competence for certification

An information security ontology incorporating human-behavioural implications

Trace and revoke systems with short ciphertexts

A UML profile for role-based access control

XML-based policy specification framework for spatiotemporal access control

Design of a zigbee-based RFID network for industry applications

TrueIP: prevention of IP spoofing attacks using identity-based cryptography

Security against DOS attack in mobile IP communication

Hill cipher modification based on eigenvalues HCM-EE

Resiliency of open-source firewalls against remote discovery of last-matching rules

Trust based traffic monitoring approach for preventing denial of service attacks

Danger theory based SYN flood attack detection in autonomic network

Static CFG analyzer for metamorphic Malware code

Digital sound card identification based on recording path imperfections

A semantic-based access control mechanism using semantic technologies

Fortifying the dalì attack on digital signature

Weakening the Dolev-Yao model through probability

Turkish national electronic identity card

A model of mandatory access for current database management systems

A scalable multi-core aware software architecture for high-performance network monitoring

BEAN: a lightweight stream cipher

Application of artificial neural network in detection of DOS attacks

AWGN based seed for random noise generator in ParseKey+

Buyer seller watermarking protocol for digital rights management

An architectural approach for assessing system trust based on security policy specifications and security mechanisms

Secure many to many routing for wireless sensor and actuator networks

Adaptability infrastructure for bridging IT security evaluation and options theory

Content Provider	ACM Digital Library
Author	Yngström, Louise Hemani, Ahmed Abbas, Haider
Abstract	The constantly rising threats in IT infrastructure raise many concerns for an organization, altering security requirements according to dynamically changing environment, need of midcourse decision management and deliberate evaluation of security measures are most striking. Common Criteria for IT security evaluation has long been considered to be victimized by uncertain IT infrastructure and considered resource hungry, complex and time consuming process. Considering this aspect we have continued our research quest for analyzing the opportunities to empower IT security evaluation process using Real Options thinking. The focus of our research is not only the applicability of real options analysis in IT security evaluation but also observing its implications in various domains including IT security investments and risk management. We find it motivating and worth doing to use an established method from corporate finance i.e. real options and utilize its rule of thumb technique as a road map to counter uncertainty issues for evaluation of IT products. We believe employing options theory in security evaluation will provide the intended benefits. i.e. i) manage dynamically changing security requirements ii) accelerating evaluation process iii) midcourse decision management. Having all the capabilities of effective uncertainty management, options theory follows work procedures based on mathematical calculations quite different from information security work processes. In this paper, we will address the diversities between the work processes of security evaluation and real options analysis. We present an adaptability infrastructure to bridge the gap and make them coherent with each other. This liaison will transform real options concepts into a compatible mode that provides grounds to target IT security evaluation and common criteria issues. We will address ESAM system as an example for illustrations and applicability of the concepts.
Starting Page	39
Ending Page	45
Page Count	7
File Format	PDF
ISBN	9781605584126
DOI	10.1145/1626195.1626208
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-10-06
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	It security evaluation It product evaluation Options theory
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Option Based Evaluation: Security Evaluation of IT Products Based on Options Theory

Design for Product Adaptability

An Evaluation of Options to Optimize IT Infrastructure Costs

The Control Parameters for New-age IT Infrastructure Options

It-security in afghanistan: fundamentals for a secure it infrastructure –.

Security evaluation of it products: bridging the gap between common criteria (cc) and real option thinking.

A Structured Approach for Internalizing Externalities Caused by IT Security Mechanisms

Teaching storage infrastructure management and security

Security Evaluation of IT Products: Bridging the Gap between Common Criteria (CC) and Real Option Thinking

Adaptability infrastructure for bridging IT security evaluation and options theory

Similar Documents

Option Based Evaluation: Security Evaluation of IT Products Based on Options Theory

Design for Product Adaptability

An Evaluation of Options to Optimize IT Infrastructure Costs

The Control Parameters for New-age IT Infrastructure Options

It-security in afghanistan: fundamentals for a secure it infrastructure –.

Security evaluation of it products: bridging the gap between common criteria (cc) and real option thinking.

A Structured Approach for Internalizing Externalities Caused by IT Security Mechanisms

Teaching storage infrastructure management and security

Security Evaluation of IT Products: Bridging the Gap between Common Criteria (CC) and Real Option Thinking

Adaptability infrastructure for bridging IT security evaluation and options theory