Risk assessment methodology for information systems, based on the user behavior and IT-security incidents analysis

Bezzateev, Sergey; Elina, Tatyana N.; Mylnikov, V. A.; Livshitz, Ilya I.

doi:10.17586/2226-1494-2021-21-4-553-561

Cited by 2 publications

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It should be taken into account that the IS of a computer network depends largely on the competent implementation of a number of organizational and design works [4], and a significant problem for modern corporate networks are data leaks [5] - [9], which occur as a result of unauthorized influence of intruders. The proposed methodology of IS risk assessment on the example of an organization's computer network is based on the identification of threats to the security of ES and is aimed at obtaining quantitative results in the assessment of IS risks.…”

Section: Komil Kerimov Et Al Methodology Of Information Security Risk...mentioning

confidence: 99%

Methodology of Information Security Risk Assessment of Electronic Resources Under Unauthorized Access Threats

Kerimov,

Azizova

2024

ETR

View full text Add to dashboard Cite

The article proposes a methodology for assessing the risk of information security of a computer network based on the results of the analysis of vulnerability attributes and protection attributes of information system elements, as well as security attributes of information system elements. According to the results of the research the space of information protection signs is formed. The results of the analysis of possible variants of threats of unauthorized access to electronic resources of the computer network, as well as solutions to reduce the risks of information security are given. Quantitative indicators of the results of the application of the proposed methodology to assess the risk of threats of unauthorized access to electronic resources of the computer network confirm the effectiveness of the proposed methodology, which can be used to improve the level of protection of electronic resources in organizations.

show abstract

Section: Komil Kerimov Et Al Methodology Of Information Security Risk...mentioning

confidence: 99%