Identifying risk profiles and mitigating actions for business communication services - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Identifying risk profiles and mitigating actions for business communication services

Résumé

Enterprises embracing Bring-Your-Own-Device encounter increased risk to data, applications and network resources. The dilemma is how to address threats with mitigating actions that do not unduly disrupt business, yet protect vulnerable assets. This paper proposes a model that identifies risk context and automatically selects appropriate actions. Risks are detected by conflicting observations, timeline discrepancies and risk-indicating behavior patterns. Detected risks are used to construct risk profiles that capture enterprise's risk mitigation policies via customizable prioritization, and business attributes are used to determine business profiles. It is proposed to utilize a novel multi-dimensional weighting to highlight relationships of risks with assets/actions. Best-fit profiles for both business and risk are selected via ‘if-the-shoe-fits' process. Then, mitigating actions are determined by fusing the risk and business profiles, and precise actions are established via score ‘tolerance bands'
Fichier non déposé

Dates et versions

hal-01286074 , version 1 (10-03-2016)

Identifiants

Citer

Rebecca Copeland, Noel Crespi. Identifying risk profiles and mitigating actions for business communication services. CNSM 2014 : 10th International Conference on Network and Service Management, Nov 2014, Rio De Janeiro, Brazil. pp.236 - 241, ⟨10.1109/CNSM.2014.7014165⟩. ⟨hal-01286074⟩
71 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More