TFO & Incident centered security management - Department of ...

More documents

Recommendations

Info

Model Assumptions Logical Structure of Models 5 6 Organizing Principles Interaction of Left & Right Paradigms Left of Incident Right of Incident Indications & Warnings Prevent Refine Information System Resource Contain, Recover, Harden Threat Incident Detect Respond Deter Legislate & Policy Setting Investigate, Notify, Sue, Prosecute, Retaliate Adapted from Denning, D. E. (1999). Information Warfare and Security. Reading Mass: Addison-Wesley. 7 8
Incidents Theory of Secure Information Systems Prevention t Recovery Hoffman, L., Michelman, E., and Clements, D. "SECURATE - Security evaluation and analysis using fuzzy metrics," in: AFIPS National Computer Conference Proceedings, 1978, pp. 531- 540. The natural relationship involves the association of potential intrusion activities associated with each member of the set of system objects. These threat-object relations defined a set of edges T i O j that manifest the components of insecurity or risk in systems. T 1 T 2 O 1 O 2 T 3 O 3 T 4 O m T n T O 9 10 Theory of Secure Information Systems The relationship between a set of system objects (each with a loss value), a set of threats (each with a likelihood), and a set of system security features (each with a resistance). In a protected system, all edges are instead prescribed in the form T i F k and F k O j that represents the insertion of security features between threats and system objects. Security Objects T 1 T 2 F 1 F 2 T 3 F 3 T 4 T n O 1 O 2 O 3 F l O m T F O 11 12
Page 1: Incident-Centered Security Manageme
Page 5 and 6: Data Breach Victims 2013 Verizon Da
Page 7: Introduction CIS 8080 Security and

TFO & Incident centered security management - Department of ...

Create successful ePaper yourself

Delete template?

Save as template?