Measure model of security risk based on utility

Jun Hao Peng; Guo Ai Xu; Yi Xian Yang; Yong Li Tang

Measure model of security risk based on utility

Jun Hao Peng^*
, Guo Ai Xu
, Yi Xian Yang
, Yong Li Tang

^*Corresponding author for this work

Beijing University of Posts and Telecommunications
Guangzhou University

Research output: Contribution to journal › Article › peer-review

12 Scopus citations

Abstract

Utility function was introduced into security risk area, and its inverse function is used to define absolute loss effect and relative loss effect as measure of risk. They are used to build criteria of risk rank. Absolute loss effect can measure the difference of risk between security incidents with high loss, low probability and security incidents with low loss, high probability. Relative loss effect can measure the difference of risk tolerance among organizations with different scale, but the average loss used very often can't measure these differences.

Original language	English
Pages (from-to)	59-61+69
Journal	Beijing Youdian Xueyuan Xuebao/Journal of Beijing University of Posts And Telecommunications
Volume	29
Issue number	2
State	Published - Apr 2006
Externally published	Yes

Keywords

Information security
Loss effect
Risk evaluation
Utility theory

Cite this

@article{901688ff91074c5d90cb6cfc9b91e382,

title = "Measure model of security risk based on utility",

abstract = "Utility function was introduced into security risk area, and its inverse function is used to define absolute loss effect and relative loss effect as measure of risk. They are used to build criteria of risk rank. Absolute loss effect can measure the difference of risk between security incidents with high loss, low probability and security incidents with low loss, high probability. Relative loss effect can measure the difference of risk tolerance among organizations with different scale, but the average loss used very often can't measure these differences.",

keywords = "Information security, Loss effect, Risk evaluation, Utility theory",

author = "Peng, \{Jun Hao\} and Xu, \{Guo Ai\} and Yang, \{Yi Xian\} and Tang, \{Yong Li\}",

year = "2006",

month = apr,

language = "英语",

volume = "29",

pages = "59--61+69",

journal = "Beijing Youdian Xueyuan Xuebao/Journal of Beijing University of Posts And Telecommunications",

issn = "1007-5321",

publisher = "Beijing University of Posts and Telecommunications",

number = "2",

}

TY - JOUR

T1 - Measure model of security risk based on utility

AU - Peng, Jun Hao

AU - Xu, Guo Ai

AU - Yang, Yi Xian

AU - Tang, Yong Li

PY - 2006/4

Y1 - 2006/4

N2 - Utility function was introduced into security risk area, and its inverse function is used to define absolute loss effect and relative loss effect as measure of risk. They are used to build criteria of risk rank. Absolute loss effect can measure the difference of risk between security incidents with high loss, low probability and security incidents with low loss, high probability. Relative loss effect can measure the difference of risk tolerance among organizations with different scale, but the average loss used very often can't measure these differences.

AB - Utility function was introduced into security risk area, and its inverse function is used to define absolute loss effect and relative loss effect as measure of risk. They are used to build criteria of risk rank. Absolute loss effect can measure the difference of risk between security incidents with high loss, low probability and security incidents with low loss, high probability. Relative loss effect can measure the difference of risk tolerance among organizations with different scale, but the average loss used very often can't measure these differences.

KW - Information security

KW - Loss effect

KW - Risk evaluation

KW - Utility theory

UR - https://www.scopus.com/pages/publications/33745663757

M3 - 文章

AN - SCOPUS:33745663757

SN - 1007-5321

VL - 29

SP - 59-61+69

JO - Beijing Youdian Xueyuan Xuebao/Journal of Beijing University of Posts And Telecommunications

JF - Beijing Youdian Xueyuan Xuebao/Journal of Beijing University of Posts And Telecommunications

IS - 2

ER -

Measure model of security risk based on utility

Abstract

Keywords

Other files and links

Fingerprint

Cite this