[Back]


Talks and Poster Presentations (with Proceedings-Entry):

S. Fenz, A. Ekelhart, T. Neubauer:
"Ontology-based Decision Support for Information Security Risk Management";
Talk: The Fourth International Conference on Systems ICONS 2009, Gosier, Guadeloupe; 2009-03-01 - 2009-03-06; in: "Proceedings of the 4th International Conference on Systems", (2009), 80 - 85.



English abstract:
As e-Business and e-Commerce applications are increasingly exposed to a variety of information security threats, corporate decision makers are increasingly forced to pay attention to security issues. Risk management provides an effective approach for measuring the security but existing risk management approaches come with major shortcomings such as the demand for very detailed knowledge about the IT security domain and the actual company environment. This paper presents the implementation of the AURUM methodology into a software solution which addresses the identified shortcomings of existing information security risk management software solutions. Thereby, the presented approach supports decision makers in risk assessment, risk mitigation, and safeguard evaluation.


Related Projects:
Project Head A Min Tjoa:
Security Ontologies


Created from the Publication Database of the Vienna University of Technology.