Identifying risk profiles and mitigating actions for business communication services

Rebecca Copeland; Noel Crespi

doi:10.1109/CNSM.2014.7014165

Identifying risk profiles and mitigating actions for business communication services

Rebecca Copeland
, Noel Crespi

CNRS SAMOVAR UMR 5157

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Enterprises embracing Bring-Your-Own-Device encounter increased risk to data, applications and network resources. The dilemma is how to address threats with mitigating actions that do not unduly disrupt business, yet protect vulnerable assets. This paper proposes a model that identifies risk context and automatically selects appropriate actions. Risks are detected by conflicting observations, timeline discrepancies and risk-indicating behavior patterns. Detected risks are used to construct risk profiles that capture enterprise's risk mitigation policies via customizable prioritization, and business attributes are used to determine business profiles. It is proposed to utilize a novel multi-dimensional weighting to highlight relationships of risks with assets/actions. Best-fit profiles for both business and risk are selected via 'if-the-shoe-fits' process. Then, mitigating actions are determined by fusing the risk and business profiles, and precise actions are established via score 'tolerance bands'.

Original language	English
Title of host publication	Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014
Editors	Danny Raz, Michele Nogueira, Edmundo Roberto Mauro Madeira, Brendan Jennings, Lisandro Zambenedetti Granville, Luciano Paschoal Gaspary
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	236-241
Number of pages	6
ISBN (Electronic)	9783901882661
DOIs	https://doi.org/10.1109/CNSM.2014.7014165
Publication status	Published - 16 Jan 2014
Externally published	Yes
Event	10th International Conference on Network and Service Management, CNSM 2014 - Rio de Janeiro, Brazil Duration: 17 Nov 2014 → 21 Nov 2014

Publication series

Name	Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014

Conference

Conference	10th International Conference on Network and Service Management, CNSM 2014
Country/Territory	Brazil
City	Rio de Janeiro
Period	17/11/14 → 21/11/14

Keywords

AHP
BYOD
Fuzzification
MCDM
OLS
OWA
SAW
WPM
context profiling
eignvector

Access to Document

10.1109/CNSM.2014.7014165

Cite this

Copeland, R., & Crespi, N. (2014). Identifying risk profiles and mitigating actions for business communication services. In D. Raz, M. Nogueira, E. R. M. Madeira, B. Jennings, L. Z. Granville, & L. P. Gaspary (Eds.), Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014 (pp. 236-241). Article 7014165 (Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/CNSM.2014.7014165

Copeland, Rebecca ; Crespi, Noel. / Identifying risk profiles and mitigating actions for business communication services. Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014. editor / Danny Raz ; Michele Nogueira ; Edmundo Roberto Mauro Madeira ; Brendan Jennings ; Lisandro Zambenedetti Granville ; Luciano Paschoal Gaspary. Institute of Electrical and Electronics Engineers Inc., 2014. pp. 236-241 (Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014).

@inproceedings{07108fe292e74b7ca703663471436dc2,

title = "Identifying risk profiles and mitigating actions for business communication services",

abstract = "Enterprises embracing Bring-Your-Own-Device encounter increased risk to data, applications and network resources. The dilemma is how to address threats with mitigating actions that do not unduly disrupt business, yet protect vulnerable assets. This paper proposes a model that identifies risk context and automatically selects appropriate actions. Risks are detected by conflicting observations, timeline discrepancies and risk-indicating behavior patterns. Detected risks are used to construct risk profiles that capture enterprise's risk mitigation policies via customizable prioritization, and business attributes are used to determine business profiles. It is proposed to utilize a novel multi-dimensional weighting to highlight relationships of risks with assets/actions. Best-fit profiles for both business and risk are selected via 'if-the-shoe-fits' process. Then, mitigating actions are determined by fusing the risk and business profiles, and precise actions are established via score 'tolerance bands'.",

keywords = "AHP, BYOD, Fuzzification, MCDM, OLS, OWA, SAW, WPM, context profiling, eignvector",

author = "Rebecca Copeland and Noel Crespi",

note = "Publisher Copyright: {\textcopyright} 2014 IFIP.; 10th International Conference on Network and Service Management, CNSM 2014 ; Conference date: 17-11-2014 Through 21-11-2014",

year = "2014",

month = jan,

day = "16",

doi = "10.1109/CNSM.2014.7014165",

language = "English",

series = "Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "236--241",

editor = "Danny Raz and Michele Nogueira and Madeira, \{Edmundo Roberto Mauro\} and Brendan Jennings and Granville, \{Lisandro Zambenedetti\} and Gaspary, \{Luciano Paschoal\}",

booktitle = "Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014",

}

Copeland, R & Crespi, N 2014, Identifying risk profiles and mitigating actions for business communication services. in D Raz, M Nogueira, ERM Madeira, B Jennings, LZ Granville & LP Gaspary (eds), Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014., 7014165, Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014, Institute of Electrical and Electronics Engineers Inc., pp. 236-241, 10th International Conference on Network and Service Management, CNSM 2014, Rio de Janeiro, Brazil, 17/11/14. https://doi.org/10.1109/CNSM.2014.7014165

Identifying risk profiles and mitigating actions for business communication services. / Copeland, Rebecca; Crespi, Noel.
Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014. ed. / Danny Raz; Michele Nogueira; Edmundo Roberto Mauro Madeira; Brendan Jennings; Lisandro Zambenedetti Granville; Luciano Paschoal Gaspary. Institute of Electrical and Electronics Engineers Inc., 2014. p. 236-241 7014165 (Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Identifying risk profiles and mitigating actions for business communication services

AU - Copeland, Rebecca

AU - Crespi, Noel

PY - 2014/1/16

Y1 - 2014/1/16

N2 - Enterprises embracing Bring-Your-Own-Device encounter increased risk to data, applications and network resources. The dilemma is how to address threats with mitigating actions that do not unduly disrupt business, yet protect vulnerable assets. This paper proposes a model that identifies risk context and automatically selects appropriate actions. Risks are detected by conflicting observations, timeline discrepancies and risk-indicating behavior patterns. Detected risks are used to construct risk profiles that capture enterprise's risk mitigation policies via customizable prioritization, and business attributes are used to determine business profiles. It is proposed to utilize a novel multi-dimensional weighting to highlight relationships of risks with assets/actions. Best-fit profiles for both business and risk are selected via 'if-the-shoe-fits' process. Then, mitigating actions are determined by fusing the risk and business profiles, and precise actions are established via score 'tolerance bands'.

AB - Enterprises embracing Bring-Your-Own-Device encounter increased risk to data, applications and network resources. The dilemma is how to address threats with mitigating actions that do not unduly disrupt business, yet protect vulnerable assets. This paper proposes a model that identifies risk context and automatically selects appropriate actions. Risks are detected by conflicting observations, timeline discrepancies and risk-indicating behavior patterns. Detected risks are used to construct risk profiles that capture enterprise's risk mitigation policies via customizable prioritization, and business attributes are used to determine business profiles. It is proposed to utilize a novel multi-dimensional weighting to highlight relationships of risks with assets/actions. Best-fit profiles for both business and risk are selected via 'if-the-shoe-fits' process. Then, mitigating actions are determined by fusing the risk and business profiles, and precise actions are established via score 'tolerance bands'.

KW - AHP

KW - BYOD

KW - Fuzzification

KW - MCDM

KW - OLS

KW - OWA

KW - SAW

KW - WPM

KW - context profiling

KW - eignvector

U2 - 10.1109/CNSM.2014.7014165

DO - 10.1109/CNSM.2014.7014165

M3 - Conference contribution

AN - SCOPUS:84922789160

T3 - Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014

SP - 236

EP - 241

BT - Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014

A2 - Raz, Danny

A2 - Nogueira, Michele

A2 - Madeira, Edmundo Roberto Mauro

A2 - Jennings, Brendan

A2 - Granville, Lisandro Zambenedetti

A2 - Gaspary, Luciano Paschoal

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 10th International Conference on Network and Service Management, CNSM 2014

Y2 - 17 November 2014 through 21 November 2014

ER -

Copeland R, Crespi N. Identifying risk profiles and mitigating actions for business communication services. In Raz D, Nogueira M, Madeira ERM, Jennings B, Granville LZ, Gaspary LP, editors, Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014. Institute of Electrical and Electronics Engineers Inc. 2014. p. 236-241. 7014165. (Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014). doi: 10.1109/CNSM.2014.7014165

Identifying risk profiles and mitigating actions for business communication services

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this