Abstract
Security risk assessment methods are numerous, and it might be confusing for organizations to select one. Researchers have conducted empirical studies with established methods in order to find factors that influence their effectiveness and ease of use. In this paper we evaluate the recent TREsPASS semi-automated risk assessment method with respect to the factors identified as critical in several controlled experiments. We also argue that automation of risk assessment raises new research questions that need to be thoroughly investigated in future empirical studies.
| Original language | English |
|---|---|
| Title of host publication | 11th International Conference on Risks and Security of Internet and Systems, CRiSIS 2016 |
| Place of Publication | Berlin |
| Publisher | Springer |
| Pages | - |
| Number of pages | 1 |
| Publication status | Published - 2016 |
| Event | 11th International Conference on Risks and Security of Internet and Systems, CRiSIS 2016 - Roscoff, France Duration: 5 Sep 2016 → 7 Sep 2016 Conference number: 11 https://conferences.telecom-bretagne.eu/crisis/2016/ |
Publication series
| Name | |
|---|---|
| Publisher | Springer |
Conference
| Conference | 11th International Conference on Risks and Security of Internet and Systems, CRiSIS 2016 |
|---|---|
| Abbreviated title | CRISIS 2016 |
| Country/Territory | France |
| City | Roscoff |
| Period | 5/09/16 → 7/09/16 |
| Other | 5-7 September 2016 |
| Internet address |
Keywords
- EC Grant Agreement nr.: FP7/318003
- EC Grant Agreement nr.: FP7/2007-2013