Risk Assessment and Real Time Vulnerability Identification in IT Environments

View Sample PDF

Author(s): Laerte Peotta de Melo (University of Brasilia, Brazil)and Paulo Roberto de Lira Gondim (University of Brasilia, Brazil)
Copyright: 2012
Pages: 25
Source title: Information Assurance and Security Technologies for Risk Assessment and Threat Management: Advances
Source Author(s)/Editor(s): Te-Shun Chou (East Carolina University, USA)
DOI: 10.4018/978-1-61350-507-6.ch009

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View Risk Assessment and Real Time Vulnerability Identification in IT Environments on the publisher's website for pricing and purchasing information.

Abstract

Contrary to static models of risk analysis, the authors propose a pro-active framework for identifying vulnerabilities and assessing risk in real-time. Instead of searching for vulnerabilities from an external point of view, where the information is obtained by simply exploring a digital asset (computational system composed of hardware and software), the authors propose that software agents (sensors) capable of providing application, configuration and location information be incorporated into assets. Any observed changes, such as physical location, software update or installation, hardware modifications, changes in security policy and others, will be immediately reported by the agent, in a pro-active manner, to a central repository. It is possible to assess risk in a certain environment comparing databases of rules and known vulnerabilities with information about each asset, collected by the sensors and stored in the central repository.

The IRMA Community

Research IRM

Risk Assessment and Real Time Vulnerability Identification in IT Environments

Purchase

Abstract

Related Content

IRMA Sponsors