论文信息 - 4. Security Assessment and Management in Cyber-Risk - 字舞流文

4. Security Assessment and Management in Cyber-Risk

Mehmet Sahinoglu

[1] M. Sahinoglu. Quantitative risk assessment for dependent vulnerabilities , 2006, RAMS '06. Annual Reliability and Maintainability Symposium, 2006..

[2] George Cybenko. Why Johnny Can't Evaluate Security Risk , 2006, IEEE Secur. Priv..

[3] Mehmet Sahinoglu,et al. An Input–Output Measurable Design for the Security Meter Model to Quantify and Manage Software Security Risk , 2008, IEEE Transactions on Instrumentation and Measurement.

[4] Daniel E. Geer,et al. Information security is information risk management , 2001, NSPW '01.

[5] Cynthia Mathis Beath,et al. Departmentalization in software development and maintenance , 1990, CACM.

[6] Mehmet Sahinoglu,et al. Security meter: a practical decision-tree model to quantify risk , 2005, IEEE Security & Privacy Magazine.