Information Security Risk Assessment Model Based on Computing with Words
Abstract
The basis for company IT infrastructure security is information security risks assessment of IT services. The increased complexity, connectivity and rapid changes occurring in IT services make it impossible to apply traditional models of quantitative/qualitative risk assessment. Existing quantitative assessment models are time-consuming, at the same time, qualitative assessment models do not take into account the subjective expert assessments and the uncertainty of risk factors. This paper presents the new information security risk assessment model for IT services based on computing with words. The model methodology is based on OWASP risk rating methodology for web applications. To evaluate risk factors, it is proposed to use dictionary consisting of 16/32 granular terms (words). Problems of uncertainty in perceptual assessments of risk factors are taken into account using methods of the theory of discrete interval type-2 fuzzy sets and systems.
Keywords
risk, risk assessment, risk factor, information security, IT service, discrete interval type-2 fuzzy set, computing with wordsPersistent identifier
http://hdl.handle.net/11012/179207Document type
Peer reviewedDocument version
Final PDFSource
Mendel. 2017 vol. 23, č. 1, s. 119-124. ISSN 1803-3814https://mendel-journal.org/index.php/mendel/article/view/62
Collections
- Vol. 23, No. 1 [26]