Proposed Framework for Security Risk Assessment

• 作者: Ahmad Mashhour Heba Refai Zakaria I. Saleh
• 来源期刊: 信息安全(英文)
• 学科: 工学
• 关键词: SECURITY RISK VULNERABILITIES FRAMEWORK SIMULATION
• 年，卷（期）: 2011,（2）
• 页码范围: 85-90
• 页数: 6页
• 分类号: TP39

摘要

Security risk assessment framework provides comprehensive structure for security risk analysis that would help uncover systems’ threats and vulnerabilities. While security risk assessment is an important step in the security risk management process, this paper will focus only on the security risk assessment framework. Viewing issues that exist in a current framework, we have developed a new framework for security risk and vulnerabilities assessment by adding new components to the processes of the existing framework. The proposed framework will further enhance the outcome of the risk assessment, and improve the effectiveness of the current framework. To demonstrate the efficiency the proposed framework, a network security simulation as well as filed tests of an existing network where conducted.