Work

Externalizing behaviour for analysing system models

Year: 2013

Type: article

Abstract: System models have recently been introduced to model organisations and evaluate their vulnerability to threats and especially insider threats.Especially for the latter these models are very suitable, since insiders can be assumed to have more knowledge about the attacked organisation than outside attackers.Therefore, many attacks are considerably easier to be performed for insiders than for outsiders.However, current models do not support explicit specification of different behaviours.Instead, behaviour is deeply embedded in the analyses supported by the models, meaning that it is a complex, if not impossible task to change behaviours.Especially when considering social engineering or the human factor in general, the ability to use different kinds of behaviours is essential.In this work we present an approach to make the behaviour a separate component in system models, and explore how to integrate in existing models.

Source: VBN Forskningsportal (Aalborg Universitet)

Authors: Marieta Georgieva Ivanova, Christian W. Probst, René Rydhof Hansen, Florian Kammüller

Institutions: Technical University of Denmark, Aalborg University, Middlesex University London

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funder: European Commission

Awards: Technology-supported Risk Estimation by Predictive Assessment of Socio-technical Security, G3207356259, G393177772, G5702163051

OpenAlex ID: W1948669034