Thread View: comp.security.misc
2 messages
2 total messages
Started by Zan Anastovski
Fri, 22 Jan 1993 06:02
quantitaive risk analysis
Author: Zan Anastovski
Date: Fri, 22 Jan 1993 06:02
Date: Fri, 22 Jan 1993 06:02
12 lines
677 bytes
677 bytes
Hello, I am doing some research on risk analysis and would like to know of any journals/books which discuss the quantitative aspects of risk analysis ie: cost/benfit analysis on computer security thanx in advance for any directions .... zan anastovski e-mail : zan@falin.cs.uow.edu.au
Re: quantitaive risk analysis
Author: Rick Smith
Date: Mon, 25 Jan 1993 19:40
Date: Mon, 25 Jan 1993 19:40
9 lines
958 bytes
958 bytes
I haven't seen anything on cost/benefit and computer security risk analysis, but there are several US DOD Orange Book derived approaches that specify strength of security (actually, Orange Book rating) to security risk (actually, range of data sensitivity handled). It's documented in the Yellow Book: CSC-STD-003-85, Guidance for Applying the TCSEC in Specific Environments. I remember hearing a couple of papers presenting alternative rating approaches at the 1991 NCSC, and they should be in the Proceedings.
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads