Ontology-based Decision Support for Information Security Risk Management

S. Fenz, A. Ekelhart,T. Neubauer:
"Ontology-based Decision Support for Information Security Risk Management";
Vortrag: The Fourth International Conference on Systems ICONS 2009, Gosier, Guadeloupe; 01.03.2009 - 06.03.2009; in:"Proceedings of the 4th International Conference on Systems", (2009), S. 80 - 85.

[ Publication Database ]


As e-Business and e-Commerce applications are increasingly exposed to a variety of information security threats, corporate decision makers are increasingly forced to pay attention to security issues. Risk management provides an effective approach for measuring the security but existing risk management approaches come with major shortcomings such as the demand for very detailed knowledge about the IT security domain and the actual company environment. This paper presents the implementation of the AURUM methodology into a software solution which addresses the identified shortcomings of existing information security risk management software solutions. Thereby, the presented approach supports decision makers in risk assessment, risk mitigation, and safeguard evaluation.