The integrated risk analysis and risk assessment method of information security

Authors

  • Светлана Владимировна Казмирчук National Aviation University
  • Андрей Юрьевич Гололобов

DOI:

https://doi.org/10.18372/2410-7840.16.7543

Keywords:

risk, risk analysis, risk assessment, risk analysis and risk assessment system, risk parameters, the fuzzy variable, standard values, the terms transformation of linguistic variables, the integrated risk analysis and risk assessment method

Abstract

One of the stages of information security management system construction is provided with the realization of risk analysis and risk assessment process. Often in the assessment process there are some situations when theexpert can’t always clearly assess the information securitythreat. To solve these tasks the known determined or fuzzy methods are applied. According to these methods the corresponding systems have been developed. Practically,in some cases, it is necessary to carry out a risk assessmentwith a combination of approaches of the expertsinterpretation judgments both regarding their capabilitiesto determine the meaning of received assessedparameters, and their uncertainty in the accuracy of priorities.The specified assessment possibilities are not integratedin the existing systems. To address a challenge andsimplify the risks assessment the integrated risk analysisand risk assessment method is provided, which, in contrastto the well-known, enables to operate simultaneously the clear and fuzzy sets with the ability to transform theterms of linguistic variables.

Author Biographies

Светлана Владимировна Казмирчук, National Aviation University

PhD in Eng., Associate Professorof Academic Department of IT-Security, National Aviation University

Андрей Юрьевич Гололобов

postgraduate student of Academic Department of IT-Security National Aviation University

References

. Корченко А.Г. Методы анализа и оценки рисков потерь государственных информационных ресурсов / А.Г. Корченко, В.П. Щербина, С.В. Казмирчук // Защита информации – 2012. –

№1. – С. 126-139.

. Казмирчук С.В. Анализ и оценивание рисков информационных ресурсов / С.В. Казмирчук // Защита информации – 2013. – Том 15 №1 (58). – С. 37-46.

. Казмирчук С.В. Анализа и оценивания рисков информационных ресурсов в нечетких условиях / С.В. Казмирчук // Защита информации – 2013. – Том 15 №2 (59). – С. 133-140.

. Корченко А.Г. Интегрированное представление параметров риска / Корченко А.Г., Иванченко Е.В., Казмирчук С.В. // Защита информации – 2011. – №1 (50). – С. 96 – 101.

. Казмирчук С.В. Метод трансформирования термов лингвистических переменных в задачах анализа и оценивания рисков информационной безопасности / С.В. Казмирчук // Защита ин-

формации – 2013. – Том 15 №3 (60). – С. 268-276.

Downloads

Published

2015-02-05

Issue

Vol. 16 No. 3 (2014)

Section

Articles

License

Authors who publish with this journal agree to the following terms:

  1. Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.

  2. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.

  3. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).