Risk Assessment and Real Time Vulnerability Identification in IT Environments

View Sample PDF

Author(s): Laerte Peotta de Melo (University of Brasilia, Brazil)and Paulo Roberto Lira Gondim (University of Brasilia, Brazil)
Copyright: 2014
Pages: 25
Source title: Crisis Management: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Information Resources Management Association (USA)
DOI: 10.4018/978-1-4666-4707-7.ch081

Keywords: Business Science Reference / Crisis Response and Management / Emergency & Disaster Management / Government & Law

Purchase

View Risk Assessment and Real Time Vulnerability Identification in IT Environments on the publisher's website for pricing and purchasing information.

Abstract

Contrary to static models of risk analysis, the authors propose a pro-active framework for identifying vulnerabilities and assessing risk in real-time. Instead of searching for vulnerabilities from an external point of view, where the information is obtained by simply exploring a digital asset (computational system composed of hardware and software), the authors propose that software agents (sensors) capable of providing application, configuration and location information be incorporated into assets. Any observed changes, such as physical location, software update or installation, hardware modifications, changes in security policy and others, will be immediately reported by the agent, in a pro-active manner, to a central repository. It is possible to assess risk in a certain environment comparing databases of rules and known vulnerabilities with information about each asset, collected by the sensors and stored in the central repository.

The IRMA Community

Research IRM

Risk Assessment and Real Time Vulnerability Identification in IT Environments

Purchase

Abstract

Related Content

IRMA Sponsors