Presentation 2006-07-13
A Relative Evaluation of Information Security Countermeasures
Hirotoshi OOMURA, Naoshi SATO,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) The paper focuses the risk solution to evaluate security countermeasures, which is one of the critical making-decision processes in information security management. The conventional evaluation method recommends to use absolute values such as an amount of information assets, occurrence probability of security risks and cost of the countermeasures, in order to financially rate them. However, it is actually difficult to apply the conventional method since large scale investigation of the absolute values is needed about every parameter. To cope with the issues, the paper proposes a relative evaluation method in use of both pairwise comparison and the Analytic Hierarchy Process (AHP). Although the evaluation results of the proposed method contain quantization errors, application of the proposed method enables the financial evaluation with less investigation. The paper shows numerical examples and discusses effectiveness of the proposed method in comparison with the conventional method.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Information Security / Relative Evaluation / Pairwise Comparison / Analytic Hierarchy Process
Paper # CQ2006-25
Date of Issue

Conference Information
Committee CQ
Conference Date 2006/7/6(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Communication Quality (CQ)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) A Relative Evaluation of Information Security Countermeasures
Sub Title (in English)
Keyword(1) Information Security
Keyword(2) Relative Evaluation
Keyword(3) Pairwise Comparison
Keyword(4) Analytic Hierarchy Process
1st Author's Name Hirotoshi OOMURA
1st Author's Affiliation FUJITSU FIP CORPORATION()
2nd Author's Name Naoshi SATO
2nd Author's Affiliation Institute of Information Security
Date 2006-07-13
Paper # CQ2006-25
Volume (vol) vol.106
Number (no) 153
Page pp.pp.-
#Pages 6
Date of Issue