@inproceedings{9e478be661ae4dd29ffc3d91453359d7,
title = "An information security risk assessment method based on conduct effect and dynamic threat",
abstract = "Traditional Information Security Risk Assessment method did not consider the dynamic characteristic and risk conduct effect among assets, which makes the assessment result inaccurately. To solve this problem, this paper proposes a novel Information Security Risk Assessment method based on Conduct effect and Dynamic threat (ISRACD). ISRACD adopts DTC (Dynamic Threat Calculation) method to calculate threat degree more objectively. Besides, ISRACD proposes ACEC (Asset Conduct Effect Calculation) method to describe the conduct effect among assets and quantify the conduct value. Based on the two methods, ISRACD can obtain the security level more precisely.",
keywords = "Dynamic Threat, Information Security Risk Assessment, risk conduct effect",
author = "Hong Qiao and Jianwei Tian and Zheng Tian and Wenhui Qi and Xi Li and Hongyu Zhu and Shengsheng Chen",
note = "Publisher Copyright: {\textcopyright} 2017 IEEE.; 8th IEEE International Conference on Software Engineering and Service Science, ICSESS 2017 ; Conference date: 24-11-2017 Through 26-11-2017",
year = "2017",
month = jul,
day = "2",
doi = "10.1109/ICSESS.2017.8343029",
language = "英语",
series = "Proceedings of the IEEE International Conference on Software Engineering and Service Sciences, ICSESS",
publisher = "IEEE Computer Society",
pages = "782--786",
editor = "Li Wenzheng and Babu, \{M. Surendra Prasad\} and Lei Xiaohui",
booktitle = "ICSESS 2017 - Proceedings of 2017 IEEE 8th International Conference on Software Engineering and Service Science",
}