정보보호를 위한 다속성 위협지수 - 시뮬레이션과 AHP 접근방법

• 영문명: Multi-Attribute Threat Index for Information Security：Simulation and AHP Approach
• 발행기관: 한국IT서비스학회
• 저자명: 이강수(Kang-Soo Lee) 김기윤(Ki-Yoon Kim) 나관식(Kwan-Sik Na)
• 간행물 정보: 『한국IT서비스학회지』한국IT서비스학회지 제7권 제1호, 117~130쪽, 전체 14쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2008.03.30

영문 초록

  Multi-attribute risk assessments provide a useful framework for systematic quantitative risk assessment that the security manager can use to prioritize security requirements and threats. In the first step, the security managers identify the four significant outcome attributes(lost revenue, lost productivity, lost customer, and recovery cost). Next, the security manager estimates the frequency and severity(three points estimates for outcome attribute values) for each threat and rank the outcome attributes according to AHP(Analytic Hierarchy Process). Finally, we generate the threat index by using multi-attribute function and make sensitivity analysis with simulation package(Crystal Ball). In this paper, we show how multi-attribute risk analysis techniques from the field of security risk management can be used by security managers to prioritize their organization’s threats and their security requirements, eventually they can derive threat index. This threat index can help security managers to decide whether their security investment is consistent with the expected risks. In addition, sensitivity analysis allows the security manager to explore the estimates to understand how they affect the selection.

목차

Abstract
1. 서론
2. 기존 연구
3. 연구모형
4. 분석절차
5. 사례연구
6. 결론
참고문헌
저자소개

키워드

Information Security Multi-Attribute Threat Index Simulation