A Cooperative Model for IS Security Risk Management in Distributed Environment. (19th January 2014)

• Record Type: Journal Article
• Authors: Feng, Nan; Zheng, Chundong
• Other Names: Shu J. Academic Editor.; Yu F. Academic Editor.
• Is Part Of: TheScientificWorldjournal. Volume 2014(2014)
• Publication Date: 2014-01-19
• Subjects: Science -- Periodicals; Technology -- Periodicals; Medicine -- Periodicals; 505
• DOI: 10.1155/2014/167497
• Languages: English
• ISSNs: 2356-6140

Abstract

Abstract : Given the increasing cooperation between organizations, the flexible exchange of security information across the allied organizations is critical to effectively manage information systems (IS) security in a distributed environment. In this paper, we develop a cooperative model for IS security risk management in a distributed environment. In the proposed model, the exchange of security information among the interconnected IS under distributed environment is supported by Bayesian networks (BNs). In addition, for an organization's IS, a BN is utilized to represent its security environment and dynamically predict its security risk level, by which the security manager can select an optimal action to safeguard the firm's information resources. The actual case studied illustrates the cooperative model presented in this paper and how it can be exploited to manage the distributed IS security risk effectively.