Reference : From Situation Awareness to Action: An Information Security Management Toolkit for So...

	Document type :	Scientific congresses, symposiums and conference proceedings : Paper published in a book
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/29940

Title :	From Situation Awareness to Action: An Information Security Management Toolkit for Socio-Technical Security Retrospective and Prospective Analysis
Language :	English
Author, co-author :	Huynen, Jean-Louis [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Lenzini, Gabriele [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
Publication date :	2017
Main document title :	Proceedings of the 3rd International Conference on Information Systems Security and Privacy
Peer reviewed :	Yes
Event name :	ICISSP - 3rd International Conference on Information Systems Security and Privacy
Event date :	from 19-02-2017 to 21-02-2017
Event place (city) :	Porto
Event country :	Portugal
Keywords :	[en] Socio-Technical Security ; Information Security Management and Reasoning ; Root Cause Analysis
Abstract :	[en] Inspired by the root cause analysis procedures common in safety, we propose a methodology for a prospective and a retrospective analysis of security and a tool that implements it. When applied prospectively, the methodology guides analysts to assess socio-technical vulnerabilities in a system, helping them to evaluate their choices in designing security policies and controls. But the methodology works also retrospectively. It assists analysts in retrieving the causes of an observed socio-technical attack, guiding them to understand where the information security management of the system has failed. The methodology is tuned to find causes that root in the human-related factors that an attacher can exploit to execute its intrusion.
Funders :	Fonds National de la Recherche - FnR
Permalink :	http://hdl.handle.net/10993/29940
FnR project :	FnR ; FNR1183245 > Peter Y. A. Ryan > STAST > Socio-Technical Analysis of Security and Trust > 01/05/2012 > 30/04/2015 > 2011

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Open access SCREAM.pdf Author postprint 765.22 kB View/Open

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map