A new lightweight method for security risk assessment based on fuzzy cognitive maps
By: Piotr Szwed and Paweł Skrzyński
Open Access
|Mar 2014References
- Aguilar, J. (2005). A survey about fuzzy cognitive maps papers,(2): 27-33.
- Anderson, S., De Palma, A. and Thisse, J. (1992).,MIT Press, Boston, MA.
- Axelrod, R.M. (1976)., Princeton University Press, New York, NY.
- Baudrit, C., Dubois, D. and Guyonnet, D. (2006). Joint propagation and exploitation of probabilistic and possibilistic information in risk assessment,(5): 593-608.
- Birolini, A. (2000)., 3rd Edn., Springer-Verlag, Berlin.
- Bowles, J.B. and Wan, C. (2001). Software failure modes and effects analysis for a small embedded control system,, pp. 1-6.
- Cervesato, I. and Meadows, C. (2003). Fault-tree representation of NPATRL security requirements,, pp. 1-10.
- Chen, X.Z. (2006). Hierarchical threat assessment and quantitative calculation method of network security threatening state,(4): 885-897.
- Chiang, F. and Braun, R. (2007). Self-adaptability and vulnerability assessment of secure autonomic communication networks,, pp. 112-122.
- Craft, R., Vandewart, R., Wyss, G. and Funkhouser, D. (1998). An open framework for risk management 1,.
- Eom, J.-H., Park, S.-H., Han, Y.-J. and Chung, T.-M. (2007). Risk assessment method based on business process-oriented asset evaluation for information system security,, pp. 1024-1031.
- Guttman, B. and Roback, E.A. (1995). An introduction to computer security: The NIST handbook,(12): 1-290.
- Hagiwara, M. (1992). Extended fuzzy cognitive maps,, pp. 795-801.
- Han, Y.-J., Yang, J.S., Chang, B.H., Na, J.C. and Chung, T.-M. (2004). The vulnerability assessment for active networks: Model, policy, procedures, and performance evaluations,A. Laganà, M.L. Gavrilova, V. Kumar, Y. Mun, C.J.K. Tan and O. Geruasi (Eds.),Lecture Notes in Computer Science, Vol. 3034, Springer, Berlin/Heidelberg, pp. 191-198.
- Hoo, K.J.S. (2000). How much is enough? A risk-management approach to computer security,, Stanford University, Stanford, CA, pp. 1-99.
- Hubbard, D. and Evans, D. (2010). Problems with scoring methods and ordinal scales in risk assessment,(3): 1-10.
- Institute for Computer Sciences and Technology (1979)., National Bureau of Standards, Washington, DC.
- ISO/IEC (2011). Information technology-Security techniques-Information security risk management,International Organization for Standardization, Washington, DC.
- Jetter, A. and Schweinfort, W. (2011). Building scenarios with fuzzy cognitive maps: An exploratory study of solar energy,(1): 52-66.
- Kobylarz, D. and Danda, J. (2013). A common interface for bluetooth-based health monitoring devices,, pp. 153-154.
- Kosko, B. (1986). Fuzzy cognitive maps,(1): 65-75.
- Kosko, B. (1992)., Prentice Hall, Englewood Cliffs, NJ.
- Landoll, D.J. (2005)., Auerbach Publications, Boca Raton, FL.
- Lazzerini, B. and Mkrtchyan, L. (2011). Analyzing risk impact factors using extended fuzzy cognitive maps,(2): 288-297.
- Maglogiannis, I., Zafiropoulos, E., Platis, A. and Lambrinoudakis, C. (2006). Risk analysis of a patient monitoring system using Bayesian network modeling,(6): 637-647.
- Mikulik, J. and Zajdel, M. (2009). Automatic risk control based on FSA methodology adaptation for safety assessment in intelligent buildings,(2): 317-326, DOI: 10.2478/v10006-009-0027-1.
- Modarres, M., Kaminskiy, M. and Krivtsov, V. (1999)., CRC Press, New York, NY.
- Ozesmi, U. Ozesmi, S. (2004). Ecological models based on people’s knowledge: A multi-step fuzzy cognitive mapping approach,(1-2): 43-64.
- Papageorgiou, E.I. (2011). Learning algorithms for fuzzy cognitive maps-A review study,(2): 1-14.
- Peng L.X. (2007). Model danger theory based network risk assessment,(6).
- Ross, R.S. (2011). Guide for conducting risk assessments,, September, p. 85.
- Schneier, B. (1999). Attack trees,(12): 21-29.
- Stamatis, D. H. (2003)., ASQ Quality Press, Milwaukee, WI.
- Stathiakis, N., Chronaki, C., Skipenes, E., Henriksen, E., Charalambus, E., Sykianakis, A., Vrouchos, G., Antonakis, N., Tsiknakis, M. and Orphanoudakis, S. (2003). Risk assessment of a cardiology ehealth service in HYGEIAnet,, pp. 201-204.
- Sun, L., Srivastava, R.P. and Mock, T.J. (2006). An information systems security risk assessment model under the Dempster-Shafer theory of belief functions,(4): 109-142.
- Szpyrka, M., Jasiul, B., Wrona, K. and Dziedzic, F. (2013). Telecommunications networks risk assessment with Bayesian networks,K. Saeed, R. Chaki, A. Cortesi and S.T.Wierzchon (Eds.),, Lecture Notes in Computer Sience, Vol. 8104, Springer-Verlag, Berlin, pp. 277-288.
- Szwed, P. (2013). Application of fuzzy ontological reasoning in an implementation of medical guidelines,, pp. 342-349.
- Szwed, P., Skrzynski, P. and Grodniewicz, P. (2013). Risk assessment for SWOP telemonitoring system based on fuzzy cognitive maps,A. Dziech and A. Czy˙zewski (Eds.),, Communications in Computer and Information Science, Vol. 368, Springer, Berlin/Heidelberg, pp. 233-247.
- The Open Group (2012). Open Group Standard, Archimate 2.0 Specification, www.opengroup.org.
- Vesely, W.E., Goldberg, F.F., Roberts, N.H. and Haasl, D.F. (1981). Fault tree handbook,, Nuclear Regulatory Commission, Washington, DC.
- Wang Y., Zhu, A. and Zhang, J. (2011). Research on and application of the analyzing method of network security based on security case reasoning,pp. 1-4.
- Zhuang, Y., Li, X., Xu, B. and Zhou, B. (2009). Information security risk assessment based on artificial immune danger theory,, pp. 169-174.
Language: English
Page range: 213 - 225
Published on: Mar 25, 2014
Published by: University of Zielona Góra
In partnership with: Paradigm Publishing Services
Publication frequency: 4 issues per year
Keywords:
Related subjects:
© 2014 Piotr Szwed, Paweł Skrzyński, published by University of Zielona Góra
This work is licensed under the Creative Commons License.