작업처리율을 고려한 정보보호 투자 포트폴리오 평가
Considering System Throughput to Evaluate Information Security Investment Portfolios
2
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
We consider an information system where its throughput deteriorates due to security threats and evaluate information security investment portfolios. We assume that organizations adopt information security countermeasures (or portfolios consisted of countermeasures) to lessen the damage resulted from the productivity (or throughput) deterioration. A probability model is used to derive the system throughput and the average number of repairs according to the occurrence rate of security threats. Considering the revenue from throughput, the repair cost, and the investment for the security system, the net present value for each portfolio is derived. Organizations can compare information security investment portfolios and select the optimal portfolio.
Abstract
We consider an information system where its throughput deteriorates due to security threats and evaluate information security investment portfolios. We assume that organizations adopt information security countermeasures (or portfolios consisted of countermeasures) to lessen the damage resulted from the productivity (or throughput) deterioration. A probability model is used to derive the system throughput and the average number of repairs according to the occurrence rate of security threats. Considering the revenue from throughput, the repair cost, and the investment for the security system, the net present value for each portfolio is derived. Organizations can compare information security investment portfolios and select the optimal portfolio.
참고문헌 (13)
- 국가정보원, "2009 국가정보보호백서", 17~26 (2009)
- L.A.Gordon, "Managing Cyber-Security Resources: A Cost-Benefit Analysis", pp.53~60 (2006), McGraw-Hill
- 유진호, "인터넷 침해사고에 의한 피해손실 측정", 정보화정책, 15(1), pp.3~18 (2008), 한국정보화진흥원
- 양원석, "확률모형을 이용한 정보보호 투자 포트폴리오 분석", 한국경영과학회지, 34(3), pp.155~163 (2009), 한국경영과학회
- M.Ohnishi, "An optimal inspection and replacement policy for a deteriorating system", Journal of Applied Probability, 23(4), pp.973~988 (1986)
- C.T.Lam, "Optimal maintenance policies for deteriorating systems under various maintenance strategies", IEEE Transactions on Reliability, 43(3), pp.423~430 (1994)
- R.H.Yeh, "Optimal inspection and replacement policies for multi-state deteriorating systems", European Journal of Operational Research, 96(2), pp.248~259 (1997)
- C.C.Hsieh, "Optimal maintenance policy in a multistate deteriorating standby system", European Journal of Operational Research, 141(3), pp.689~698 (2002)
- C.C.Hsieh, "Replacement and standby redundancy policies in a deteriorating system with aging and random shocks", Computers and Operations Research, 32(9), pp.2297~2308 (2005)
- S.M. Ross, "Stochastic Process", pp.251~253 (1996), John Wiley & Sons
- H.W.Lilliefors, "Some confidence intervals for queues", Operations Research, 14(4), pp.723~727 (1966)
- W.Mendenhall, "Mathematical Statistics with Applications, 3th Ed.", pp.367~370 (1986), Duxbury Press
- 공희경, "AHP를 이용한 정보보호투자 의사결정에 대한 연구", Journal of Information Technology Applications & Management, 15(1), pp.139~152 (2008), 한국데이타베이스학회