A hybrid model for information security risk assessment

Haji, S. ; Tan, Q. ; Costa, R.S. (Universidad de Zaragoza)

Resumen: Many industry standards and methodologies were introduced which has brought forth the management of threats assessment and risk management of information assets in a systematic manner. This paper will review and analyze the main processes followed in IT risk management frameworks from the perspective of the threat analysis process using a threat modeling methodology. In this study, the authors propose a new assessment model which shows that systematic threat analysis is an essential element to be considered as an integrated process within IT risk management frameworks. The new proposed model complements and fulfills the gap in the practice of assessing information security risks.

Idioma: Inglés

DOI: 10.30534/ijatcse/2019/1981.12019

Año: 2019

Publicado en: International journal of advanced trends in computer science and engineering 8, 1.1 (2019), 100-106
ISSN: 2278-3091

Originalmente disponible en: Texto completo de la revista

Factor impacto SCIMAGO: 0.129 - Electrical and Electronic Engineering (Q4) - Computer Science (miscellaneous) (Q4)

Tipo y forma: Artículo (Versión definitiva)

Área (Departamento): Área Didáctica y Organiz. Esc. (Dpto. Ciencias de la Educación)