상세정보
학술대회
Return on Security Investment Against Cyber Attacks on Availability
- 발행일
- 200605
- 출처
- International Conference on Computational Science and Its Applications (ICCSA) 2006 (LNCS 3981), v.3981, pp.270-278
- 협약과제
- 06MK1100, 고성능 네트워크 정보보호 시스템 개발, 손승원
- 초록
- As it is getting more important to support stabilized secure services, many organizations increase the security investment to protect their assets and clients from cyber attacks. The purpose of this paper is to suggest a guideline for security managers to select a set of the security countermeasures that mitigates damages from availability attacks in a cost-effective manner. We present a systematic approach to the risk analysis against availability attacks and demonstrate countermeasure benefit estimations. The risk analysis consists of three procedures: Service Value Analysis, Threat Analysis, and Countermeasure Analysis. As the outcome of the procedures, our approach produces quantitative benefit analysis for each countermeasure against availability attacks. We have applied a simulation tool developed to implement the approach to VoIP(Voice over Internet Protocol) services and the result is also presented. © Springer-Verlag Berlin Heidelberg 2006.
- KSP 제안 키워드
- Cyber attacks, Internet protocol(IP), Security countermeasures, Service value, Threat Analysis, Value analysis, Voice over internet protocol, benefit analysis, cost-effective, risk analysis, security investment