• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Journal of Intelligent Information Systems >Risk-neutral evaluation of information security investment on data centers
【24h】

Risk-neutral evaluation of information security investment on data centers

机译：数据中心信息安全投资的风险中性评估

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Based on given data center network topology and risk-neutral management, this work proposes a simple but efficient probability-based model to calculate the probability of insecurity of each protected resource and the optimal investment on each security protection device when a data center is under security breach. We present two algorithms that calculate the probability of threat and the optimal investment for data center security respectively. Based on the insecurity flow model (Moskowitz and Kang 1997) of analyzing security violations, we first model data center topology using two basic components, namely resources and filters, where resources represent the protected resources and filters represent the security protection devices. Four basic patterns are then identified as the building blocks for the first algorithm, called Accumulative Probability of Insecurity, to calculate the accumulative probability of realized threat (insecurity) on each resource. To calculate the optimal security investment, a risk-neutral based algorithm, called Optimal Security Investment, which maximizes the total expected net benefit is then proposed. Numerical simulations show that the proposed approach coincides with Gordon's (Gordon and Loeb, ACM Transactions on Information and Systems Security 5(4):438-457,2002) single-system analytical model. In addition, numerical results on two common data center topologies are analyzed and compared to demonstrate the effectiveness of the proposed approach. The technique proposed here can be used to facilitate the analysis and design of more secured data centers.
机译：基于给定的数据中心网络拓扑和风险中性管理，这项工作提出了一个简单但有效的基于概率的模型，用于计算数据中心处于安全状态时每种受保护资源的不安全概率以及对每种安全保护设备的最佳投资违反。我们提出两种算法，分别计算威胁概率和数据中心安全性的最佳投资。基于分析安全违规的不安全流模型（Moskowitz和Kang，1997），我们首先使用两个基本组件对数据中心拓扑进行建模，即资源和过滤器，其中资源代表受保护的资源，过滤器代表安全保护设备。然后，将四种基本模式标识为第一种算法的构建块，称为不安全累积概率，以计算每种资源上已实现威胁（不安全）的累积概率。为了计算最佳安全投资，然后提出了一种基于风险中立的算法，称为最佳安全投资，该算法可以使总预期净收益最大化。数值模拟表明，该方法与Gordon（Gordon和Loeb，ACM Transactions on Information and Systems Security 5（4）：438-457,2002）单系统分析模型相吻合。此外，对两种常见数据中心拓扑的数值结果进行了分析和比较，以证明所提出方法的有效性。此处提出的技术可用于促进更安全的数据中心的分析和设计。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号