loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Authors: Paul Tavolato 1 ; Robert Luh 2 ; 1 ; Sebastian Eresheim 2 ; 1 ; Simon Gmeiner 1 and Sebastian Schrittwieser 1

Affiliations: 1 Faculty of Computer Science, Research Group Security and Privacy, University of Vienna, A-1090 Vienna, Austria ; 2 Department of Computer Science, UAS St. Pölten, A-3100 St. Pölten, Austria

Keyword(s): Security Management, Cyber Defense Measures, Security Control Assessment.

Abstract: Being able to compare the effectiveness of security controls on a sound quantitative basis would be of great benefit when it comes to decide which security controls should be implemented under given budget restrictions. This paper introduces a method for such comparisons based on a list of preventive defense actions and a list of attack actions, where the attack actions are supplemented by basic success probabilities; furthermore, a matrix showing the impact of the preventive defense actions on the success probabilities of attack actions is developed. Site specific characteristics are taken into account by the use of weights which must be defined by the security manager. Equipped with these tools a measure for the effectiveness of individual defense controls can be calculated. Comparing the measures provides valuable decision support in selecting defense controls to be implemented. A main focus lies on the easy applicability of the method to real-world situations. This is accomplishe d by incorporating information from several proven tactical and technical knowledge bases well established in the field. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.145.156.204

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Tavolato, P.; Luh, R.; Eresheim, S.; Gmeiner, S. and Schrittwieser, S. (2024). Comparing the Effectivity of Planned Cyber Defense Controls in Order to Support the Selection Process. In Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP; ISBN 978-989-758-683-5; ISSN 2184-4356, SciTePress, pages 211-218. DOI: 10.5220/0012421800003648

@conference{icissp24,
author={Paul Tavolato. and Robert Luh. and Sebastian Eresheim. and Simon Gmeiner. and Sebastian Schrittwieser.},
title={Comparing the Effectivity of Planned Cyber Defense Controls in Order to Support the Selection Process},
booktitle={Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP},
year={2024},
pages={211-218},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012421800003648},
isbn={978-989-758-683-5},
issn={2184-4356},
}

TY - CONF

JO - Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP
TI - Comparing the Effectivity of Planned Cyber Defense Controls in Order to Support the Selection Process
SN - 978-989-758-683-5
IS - 2184-4356
AU - Tavolato, P.
AU - Luh, R.
AU - Eresheim, S.
AU - Gmeiner, S.
AU - Schrittwieser, S.
PY - 2024
SP - 211
EP - 218
DO - 10.5220/0012421800003648
PB - SciTePress