Cyber-Risk Informatics

4SECURITY ASSESSMENT AND MANAGEMENT IN CYBER-RISK

LEARNING OBJECTIVES

• Describe the three-pronged concept of cyber-security risk (SM: Security-Meter) assessment techniques (quantitative, qualitative, and hybrid or semiquantitative), its advantages and disadvantages, and its relevance to cyber-risk informatics and risk engineering, and further examine nondisjoint vulnerabilities and threats.
• Implement the aforementioned SM triple concepts to actual computational practices to obtain outcomes that are superior to others, not only numerically; making cost-sense.
• Compare the SM probabilistic methods with the theoretical and simulation results.
• Perform risk management following the assessment stage by mitigating the unfavorable risk percentage to a tolerable value through game-theoretic optimization.
• Study privacy risk-meter assessment and management and Polish decoding algorithm.

4.1 INTRODUCTION

An innovative security meter (SM) that provides the convenience of risk measurements in a quantitative manner much required in the security world will be elaborated [1–11]. In pursuit of a practical and accurate statistical design, security breaches will be recorded, and then the model’s input probabilities will be estimated using the equations that were developed. Undesirable threats that take advantage of hardware and software weaknesses or vulnerabilities can impact the violation and breakdown of availability (readiness for usage), integrity (accuracy), confidentiality (provision ...