Búsqueda

Using incident response trees as a tool for risk management of online financial services

Recurso electrónico / electronic resource
Registro MARC
Tag12Valor
LDR  00000cab a2200000 4500
001  MAP20140042722
003  MAP
005  20150130130248.0
008  141118e20140901esp|||p |0|||b|spa d
040  ‎$a‎MAP‎$b‎spa‎$d‎MAP
084  ‎$a‎7
1001 ‎$0‎MAPA20140025510‎$a‎Gorton, Dan
24510‎$a‎Using incident response trees as a tool for risk management of online financial services‎$c‎Dan Gorton
520  ‎$a‎The article introduces the use of probabilistic risk assessment for modeling the incident response process of online financial services. The main contribution is the creation of incident response trees, using event tree analysis, which provides us with a visual tool and a systematic way to estimate the probability of a successful incident response process against the currently known risk landscape, making it possible to measure the balance between front-end and back-end security measures. The model is presented using an illustrative example, and is then applied to the incident response process of a Swedish bank. Access to relevant data is verified and the applicability and usability of the proposed model is verified using one year of historical data. Potential advantages and possible shortcomings are discussed, referring to both the design phase and the operational phase, and future work is presented.
650 4‎$0‎MAPA20080591182‎$a‎Gerencia de riesgos
650 4‎$0‎MAPA20080601522‎$a‎Evaluación de riesgos
650 4‎$0‎MAPA20080611613‎$a‎Modelos probabílisticos
650 4‎$0‎MAPA20080574628‎$a‎Árbol de sucesos
650 4‎$0‎MAPA20080603908‎$a‎Servicios financieros
650 4‎$0‎MAPA20080579159‎$a‎Banca electrónica
650 4‎$0‎MAPA20080541064‎$a‎Fraude
650 4‎$0‎MAPA20080571566‎$a‎Casos prácticos
7730 ‎$w‎MAP20077000345‎$t‎Risk analysis : an international journal‎$d‎McLean, Virginia : Society for Risk Analysis, 1987-2015‎$x‎0272-4332‎$g‎01/09/2014 Volumen 34 Número 9 - septiembre 2014 , p. 1763-1774