Integrated Safety Mechanisms Based on Security Risks Minimization for the Distributed Computer Systems
Автор: Vadym Mukhin, Artem Volokyta
Журнал: International Journal of Computer Network and Information Security(IJCNIS) @ijcnis
Статья в выпуске: 2 vol.5, 2013 года.
Бесплатный доступ
Today, there are known the basic principles of decision-making on the safety control of distributed computer systems in the face of uncertainty and risk. However, in this area there are no practical methods for the quantitative risk analysis and assessment, taking into account the dynamic changes of security threats, which is typical for distributed computer systems. In this paper is suggested an approach to assesment and minimization of the security risks, which allows to reduce the potential losses due to the realization of threats, to analyze the dynamics of intrusions into computer systems and to select the effective security tools. As a result, there is designed the structure of the tools for risk minimization in the distributed computer systems and are formalized the main functions of this structure. Also, in the paper is suggested the assessment of risk factors of the security threats and the probability of the threats realization, which are based on their division into appropriate groups. The proposed tools for security risk minimization allow effectively identify, classify and analyze threats to the security of the distributed computing systems.
Distributed computer systems, safety model, security risks minimization
Короткий адрес: https://sciup.org/15011161
IDR: 15011161
Список литературы Integrated Safety Mechanisms Based on Security Risks Minimization for the Distributed Computer Systems
- N.Nagaratnam, P. Janson, J. Dayka, A. Nadalin, F. Siebenlist, V. Welch, I. Foster, S. Tuecke, The Security Architecture for Open Grid Services: IBM Corporation, 2003.
- Risk Taxonomy, Open Group Publication, January 2009 www.opengroup.org/onlinepubs/9699919899/toc.pdf
- Information technology – Security techniques – Information security risk management, ISO/IEC27005:2007, Geneva, Switzerland, 2007
- P. Mell and T. Grance, Effectively and Securely Using the Cloud Computing Paradigm (v0.25), NIST Publication, 2009, http://csrc.nist.gov/ groups/SNS/ cloud-computing/index.html.
- M. Hentea, "Enhancing information security risk management with a fuzzy model", Proc. of 19th International Conference on Computer Application in Industry and Engineering. Las Vegas, USA, 2006. – pp. 132 – 139.
- R.Tassabehji, Information security threats. Encyc-lopedia of multimedia technology and networking. IDEA Group Reference. Hershey, Pennsylvania, 2005. – pp. 404 – 410.
- I. Foster, C.Kesselman, G. Tsudik, S. Tuecke, "A Security Architecture for Computational Grids", Proc. of 5-th ACM Conference on Computer and Communications Security Conference, 1998.
- I. Foster, C. Kesselman, J. Nick, S. Tuecke, "The Physiology of the Grid: An Open Grid Services Architecture for Distributed Systems Integration", 2002.
- A. Chakrabarti, Grid Computing Security: Springer, 2007.
- E. Maiwald, Fundamentals of network security. McGraw-Hill. Technology Education, New York, 2004.
- M. Hentea, Information security management. Encyclopedia of multimedia technology and net-working. IDEA Group Reference. Hershey, Pennsylvania, 2005. – pp. 390 – 395.
