IT confidentiality risk assessment for an architecture-based approach

A. Morali; E. Zambon; S. Etalle; P.L. Overbeek

doi:10.1109/BDIM.2008.4540072

IT confidentiality risk assessment for an architecture-based approach

A. Morali, E. Zambon, S. Etalle, P.L. Overbeek

Mathematics and Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

2 Citations (Scopus)

1 Downloads (Pure)

Abstract

Information systems require awareness of risks and a good understanding of vulnerabilities and their exploitations. In this paper, we propose a novel approach for the systematic assessment and analysis of confidentiality risks caused by disclosure of operational and functional information. The approach is based on a model integrating information assets and the IT infrastructure that they rely on for distributed systems. IT infrastructures enable one to analyse risk propagation possibilities and calculate the impact of confidentiality incidents. Furthermore, our approach is a mean to bridge the technical and business- oriented views of information systems, since the importance of information assets, which is leading the technical decisions, is set by the business.

Original language	English
Title of host publication	Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008)
Editors	C. Bartolini, A. Sahai, J.P. Sauvé
Publisher	Institute of Electrical and Electronics Engineers
Pages	31-40
ISBN (Print)	978-1-4244-2191-6
DOIs	https://doi.org/10.1109/BDIM.2008.4540072
Publication status	Published - 2008

Access to Document

10.1109/BDIM.2008.4540072

Cite this

Morali, A., Zambon, E., Etalle, S., & Overbeek, P. L. (2008). IT confidentiality risk assessment for an architecture-based approach. In C. Bartolini, A. Sahai, & J. P. Sauvé (Eds.), Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008) (pp. 31-40). Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/BDIM.2008.4540072

@inproceedings{20d17e414abc436fa57e12cc2b1183fb,

title = "IT confidentiality risk assessment for an architecture-based approach",

abstract = "Information systems require awareness of risks and a good understanding of vulnerabilities and their exploitations. In this paper, we propose a novel approach for the systematic assessment and analysis of confidentiality risks caused by disclosure of operational and functional information. The approach is based on a model integrating information assets and the IT infrastructure that they rely on for distributed systems. IT infrastructures enable one to analyse risk propagation possibilities and calculate the impact of confidentiality incidents. Furthermore, our approach is a mean to bridge the technical and business- oriented views of information systems, since the importance of information assets, which is leading the technical decisions, is set by the business.",

author = "A. Morali and E. Zambon and S. Etalle and P.L. Overbeek",

year = "2008",

doi = "10.1109/BDIM.2008.4540072",

language = "English",

isbn = "978-1-4244-2191-6",

pages = "31--40",

editor = "C. Bartolini and A. Sahai and J.P. Sauv{\'e}",

booktitle = "Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008)",

publisher = "Institute of Electrical and Electronics Engineers",

address = "United States",

}

Morali, A, Zambon, E , Etalle, S & Overbeek, PL 2008, IT confidentiality risk assessment for an architecture-based approach. in C Bartolini, A Sahai & JP Sauvé (eds), Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008). Institute of Electrical and Electronics Engineers, pp. 31-40. https://doi.org/10.1109/BDIM.2008.4540072

IT confidentiality risk assessment for an architecture-based approach. / Morali, A.; Zambon, E.; Etalle, S. et al.
Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008). ed. / C. Bartolini; A. Sahai; J.P. Sauvé. Institute of Electrical and Electronics Engineers, 2008. p. 31-40.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - IT confidentiality risk assessment for an architecture-based approach

AU - Morali, A.

AU - Zambon, E.

AU - Etalle, S.

AU - Overbeek, P.L.

PY - 2008

Y1 - 2008

N2 - Information systems require awareness of risks and a good understanding of vulnerabilities and their exploitations. In this paper, we propose a novel approach for the systematic assessment and analysis of confidentiality risks caused by disclosure of operational and functional information. The approach is based on a model integrating information assets and the IT infrastructure that they rely on for distributed systems. IT infrastructures enable one to analyse risk propagation possibilities and calculate the impact of confidentiality incidents. Furthermore, our approach is a mean to bridge the technical and business- oriented views of information systems, since the importance of information assets, which is leading the technical decisions, is set by the business.

AB - Information systems require awareness of risks and a good understanding of vulnerabilities and their exploitations. In this paper, we propose a novel approach for the systematic assessment and analysis of confidentiality risks caused by disclosure of operational and functional information. The approach is based on a model integrating information assets and the IT infrastructure that they rely on for distributed systems. IT infrastructures enable one to analyse risk propagation possibilities and calculate the impact of confidentiality incidents. Furthermore, our approach is a mean to bridge the technical and business- oriented views of information systems, since the importance of information assets, which is leading the technical decisions, is set by the business.

U2 - 10.1109/BDIM.2008.4540072

DO - 10.1109/BDIM.2008.4540072

M3 - Conference contribution

SN - 978-1-4244-2191-6

SP - 31

EP - 40

BT - Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008)

A2 - Bartolini, C.

A2 - Sahai, A.

A2 - Sauvé, J.P.

PB - Institute of Electrical and Electronics Engineers

ER -

Morali A, Zambon E , Etalle S, Overbeek PL. IT confidentiality risk assessment for an architecture-based approach. In Bartolini C, Sahai A, Sauvé JP, editors, Proceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008). Institute of Electrical and Electronics Engineers. 2008. p. 31-40 doi: 10.1109/BDIM.2008.4540072

IT confidentiality risk assessment for an architecture-based approach

Abstract

Access to Document

Fingerprint

Cite this