Motivation-Based Risk Analysis Process for IT Systems - Information and Communication Technology Access content directly
Conference Papers Year : 2014

Motivation-Based Risk Analysis Process for IT Systems


Information security management is one of the most important issues to be resolved. The key element of this process is risk analysis. The standards are (ISO/IEC 27000, ISO/IEC 31000) based on the complex and time consuming process of defining vulnerabilities and threats for all organisation assets. In the article we present a new approach to analysing the risk of an attack on information systems. We focus on human factor - motivation, and show its relation to hacker profiles, as well as impacts. At the beginning we introduce a new model of motivation-based risk analysis. Then we describe case study illustrating our approach for a simple set of organisation processes.
Fichier principal
Vignette du fichier
978-3-642-55032-4_45_Chapter.pdf (284.24 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01397337 , version 1 (15-11-2016)





Agata Niescieruk, Bogdan Ksiezopolski. Motivation-Based Risk Analysis Process for IT Systems. 2nd Information and Communication Technology - EurAsia Conference (ICT-EurAsia), Apr 2014, Bali, Indonesia. pp.446-455, ⟨10.1007/978-3-642-55032-4_45⟩. ⟨hal-01397337⟩
38 View
88 Download



Gmail Facebook X LinkedIn More