NDLI: Managing business health in the presence of malicious attacks

Content Provider	IEEE Xplore Digital Library
Author	Zonouz, S.A. Sharma, A. Ramasamy, H.V. Kalbarczyk, Z.T. Pfitzmann, B. McAuliffe, K. Iyer, R.K. Sanders, W.H. Cope, E.
Copyright Year	2011
Description	Author affiliation: University of Illinois at Urbana-Champaign (Zonouz, S.A.; Sharma, A.; Kalbarczyk, Z.T.; Iyer, R.K.; Sanders, W.H.) \|\| IBM Research (Ramasamy, H.V.; Pfitzmann, B.; McAuliffe, K.; Cope, E.)
Abstract	Business metrics play a critical role in determining the best system-level configuration to achieve an organizational business-level goal. We present a framework for reasoning about business-level implications of malicious attacks affecting information technology (IT) systems that underlie various business processes. Through an exemplar web-based retail company scenario, we demonstrate how to quantify both the relative value of the individual business processes, and the relative cost to the business caused by breach of key security properties. The framework allows for mapping business-level metrics to IT system-level metrics, and uses a combination of those metrics to recommend optimal response actions and to guide recovery from security attacks. We validate the framework against three high-impact attack classes common in such web-based retail company situations.
Starting Page	9
Ending Page	14
File Size	1173002
Page Count	6
File Format	PDF
ISBN	9781457703744
e-ISBN	9781457703751
e-ISBN	9781457703737
DOI	10.1109/DSNW.2011.5958856
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-06-27
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Measurement Databases Subspace constraints Servers Security Engines Business
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Malicious data attacks against dynamic state estimation in the presence of random noise

A multi-perspective approach to insider threat detection

Insider Attacks in Cloud Computing

Experimental Evaluation of Web Service Frameworks in the Presence of Security Attacks

Measuring Information Exposure Attacks on Interest Management

A Taxonomy of Time and State Attacks

Managing Enterprise IT Systems Using Online Communities

Vulnerabilities of android data sharing and malicious application to leaking private information

A Taxonomy of SQL Injection Attacks

Managing business health in the presence of malicious attacks

Similar Documents

Malicious data attacks against dynamic state estimation in the presence of random noise

A multi-perspective approach to insider threat detection

Insider Attacks in Cloud Computing

Experimental Evaluation of Web Service Frameworks in the Presence of Security Attacks

Measuring Information Exposure Attacks on Interest Management

A Taxonomy of Time and State Attacks

Managing Enterprise IT Systems Using Online Communities

Vulnerabilities of android data sharing and malicious application to leaking private information

A Taxonomy of SQL Injection Attacks

Managing business health in the presence of malicious attacks