IT confidentiality risk assessment for an architecture-based approach

A. Morali, E. Zambon, S. Etalle, P.L. Overbeek

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

2 Citaten (Scopus)
1 Downloads (Pure)


Information systems require awareness of risks and a good understanding of vulnerabilities and their exploitations. In this paper, we propose a novel approach for the systematic assessment and analysis of confidentiality risks caused by disclosure of operational and functional information. The approach is based on a model integrating information assets and the IT infrastructure that they rely on for distributed systems. IT infrastructures enable one to analyse risk propagation possibilities and calculate the impact of confidentiality incidents. Furthermore, our approach is a mean to bridge the technical and business- oriented views of information systems, since the importance of information assets, which is leading the technical decisions, is set by the business.
Originele taal-2Engels
TitelProceedings 3rd IEEE/IFIP International Workshop on Business-driven IT Management (BDIM 2008, Salvador, Brazil, April 7, 2008)
RedacteurenC. Bartolini, A. Sahai, J.P. Sauvé
UitgeverijInstitute of Electrical and Electronics Engineers
ISBN van geprinte versie978-1-4244-2191-6
StatusGepubliceerd - 2008


Duik in de onderzoeksthema's van 'IT confidentiality risk assessment for an architecture-based approach'. Samen vormen ze een unieke vingerafdruk.

Citeer dit