Simon's Intelligence Phase for Security Risk Assessment in Web Applications

Abstract

Organizations in this digital era use automated Information Technology Systems to process their information in order to support their missions. Web Applications (WA) offer services for business processes that imply handling organization valuable information. Their requirements have become more complex so as to guarantee Information Security.Security Risk Assessment (SRA) plays a critical role in protecting an organization's information assets. The main query has to do with which is the best form to determine what needs to be protected. This research will be referencing Simon's Pattern, specifically the intelligence phase, which is used to: a) examine and monitor SRA reality in WA, and b) identify and define essential problems in vulnerabilities determination and their consequences. This study establishes the bases for constructing an authentic problem pattern and how it can be attacked.

Super Learner Ensemble for Anomaly Detection and Cyber-Risk Quantification in Industrial Control Systems

“…We demonstrated the model's applicability to quantifying the cyber-risk score and articulated the cyber-risk score change in the presence of anomalous behaviour. Existing risk assessment models are driven by the IS community and IT systems [77][78][79][80], whereas methodologies such as the qualitative Hazard and Operability study (HAZOP) tend to focus on risks to personnel and equipment, not cybersecurity [81]. While individual maturity exists, a disconnect remains between Information Technology (IT) and Operational Technology (OT), particularly in ICS.…”