@inproceedings{3d0af6ac845f46468a58718a834ea10f,
title = "IT Confidentiality Risk Assessment for an Architecture-Based Approach",
abstract = "Information systems require awareness of risks and a good understanding of vulnerabilities and their exploitations. In this paper, we propose a novel approach for the systematic assessment and analysis of confidentiality risks caused by disclosure of operational and functional information. The approach is based on a model integrating information assets and the IT infrastructure that they rely on for distributed systems. IT infrastructures enable one to analyse risk propagation possibilities and calculate the impact of confidentiality incidents. Furthermore, our approach is a mean to bridge the technical and businessoriented views of information systems, since the importance of information assets, which is leading the technical decisions, is set by the business.",
keywords = "METIS-250901, IR-62209, Risk analysis, Internet, Software Architecture, systems analysis, EWI-12092, SCS-Cybersecurity",
author = "A. Morali and Emmanuele Zambon and Sandro Etalle and Paul Overbeek",
note = "10.1109/BDIM.2008.4540072 ; Third IEEE International Workshop on Business-Driven IT Management ; Conference date: 07-04-2008 Through 07-04-2008",
year = "2008",
month = mar,
day = "3",
doi = "10.1109/BDIM.2008.4540072",
language = "Undefined",
isbn = "978-1-4244-2191-6",
publisher = "IEEE",
pages = "31--40",
booktitle = "Third IEEE International Workshop on Business-Driven IT Management",
address = "United States",
}