Information security risk assessment based on decomposition probability via Bayesian Network

Yermalovich, Pavel; Mejri, Mohamed

doi:10.1109/isncc49221.2020.9297330

Cited by 4 publications

(1 citation statement)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [8], Tsaregorodtsev et al implemented cloud infrastructure information security risk assessment based on vulnerability level and usage frequency, however they did not consider real-time threats to the infrastructure. In [9], Yermalovich et al present a Bayesian-based approach to predicting potential future risks and suggest relying on forecasting the likelihood of an attack on information system assets. However, they do not consider standards and norms.…”

Section: Introductionmentioning

confidence: 99%

An Integrated Assessment Scheme of Network Infrastructure Following Security Standards and Specifications

Li¹,

Hao²,

Lei³

et al. 2022

J-NaNA

View full text Add to dashboard Cite

In this intelligent era, with deeper research, faster development, and wider application of information technologies, the network infrastructure plays one more and more important role in data communication and processing that affects almost every field worldwide. Correspondingly, cyberspace security, especially the security of network infrastructure has become elementary for countries and companies. Then, various security standards and specifications have been proposed to guide network infrastructure’s design, development, and operation. Consequently, it is the key to assess whether a network infrastructure is compliant with the related standards and specifications. However, most of the existing security assessment schemes are manual, that is, testers should check all issues depending on their understanding of the network infrastructures and related documents. That results in the lack of accuracy, continuity as well as comprehensiveness. Therefore, in this paper, we propose an Al-based network infrastructure security assessment (ISA-CN) scheme, which concerns China’s current fundamental network infrastructure security assessment related standards and specifications and evaluates the object’s security states with multi-dimensional automatically monitored network traffic data continuously and comprehensively. The analytical and experimental results show that our ISA-CN scheme is suitable for the assessment of real-world network infrastructure systems.

show abstract

Section: Introductionmentioning

confidence: 99%