Robust Optimization of IT Security Safeguards Using Standard Security Data

Andreas Schilling ()
Additional contact information
Andreas Schilling: Ruhr University Bochum

A chapter in Operations Research Proceedings 2015, 2017, pp 333-339 from Springer

Abstract: Abstract Finding an appropriate IT security strategy by implementing the right security safeguards is a challenging task. Many organizations try to address this problem by obtaining an IT security certificate from a recognized standards organization. However, in many cases the requirements of a standard are too extensive to be implemented, particularly by smaller organizations. But the knowledge contained in a security standard may still be used to improve security. Organizations that have an interest in security but not in a certificate, face the challenge of utilizing this knowledge and selecting appropriate safeguards from the given standard. To solve this problem, a new robust optimization model to determine an optimal safeguard configuration is proposed. By incorporating multiple threat scenarios, obtained solutions are robust against uncertain security threats.

Date: 2017
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:oprchp:978-3-319-42902-1_45

Ordering information: This item can be ordered from
http://www.springer.com/9783319429021

DOI: 10.1007/978-3-319-42902-1_45

Access Statistics for this chapter

More chapters in Operations Research Proceedings from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().