Towards an integrated risk analysis security framework according to a systematic analysis of existing proposals
作者机构：GSyA Research GroupUniversity of Castilla-La ManchaCiudad Real 13071Spain Institute for Analytics and Data ScienceUniversity of EssexColchester CO43SQUK Alarcos Research GroupUniversity of Castilla-La ManchaCiudad Real 13071Spain ISTR Research groupDepartment of Computer Science and ElectronicsUniversity of CantabriaSantander 39005Spain
出 版 物：《Frontiers of Computer Science》 (中国计算机科学前沿（英文版）)
年 卷 期：2024年第18卷第3期
页 面：199-216页
核心收录：
学科分类：0401[教育学-教育学] 04[教育学] 0835[工学-软件工程] 0812[工学-计算机科学与技术（可授工学、理学学位）]
基 金：the AETHERUCLM(PID2020-112540RB-C42)funded by MCIN/AEI/10.13039/501100011033,Spain,ALBA-UCLM(TED2021-130355B-C31,id.4809130355-130355-28-521),ALBA-UC(TED2021-130355B-C33,id.3611130630-130630-28-521)funded by the“Ministerio de Ciencia e Innovacion”,Spain supported by the European Union’s Horizon 2020 Project“CyberSANE”under Grant Agreement No.833683
主 题：information security management security system security risk assessment and management
摘 要：The information society depends increasingly on risk assessment and management systems as means to adequately protect its key information *** availability of these systems is now vital for the protection and evolution of ***,several factors have led to an increasing need for more accurate risk analysis *** are:the speed at which technologies evolve,their global impact and the growing requirement for companies to *** analysis processes must consequently adapt to these new circumstances and new technological *** objective of this paper is,therefore,to present the results of an exhaustive analysis of the techniques and methods offered by the scientific community with the aim of identifying their main weaknesses and providing a new risk assessment and management *** analysis was carried out using the systematic review protocol and found that these proposals do not fully meet these new *** paper also presents a summary of MARISMA,the risk analysis and management framework designed by our research *** basis of our framework is the main existing risk standards and proposals,and it seeks to address the weaknesses found in these *** is in a process of continuous improvement,as is being applied by customers in several European and American *** consists of a risk data management module,a methodology for its systematic application and a tool that automates the process.
维普期刊数据库