返回
Adaptive vulnerability-based risk identification software with virtualization functions for dynamic management
DOI:10.1016/j.jnca.2023.103728.png)
摘要
En 中文
Over the years, risk management has become increasingly important for all companies, varying from large, medium-sized to micro-enterprises. The growing increase in cyber threats and the costs they cause has forced companies to consider new types of risks. This problem mainly affects medium, small, and micro-enterprises because of their limited resources or because they do not have sufficient technological knowledge. For this reason, this article studies different frameworks associated with risk management in different business areas. In addition, an open-source, automatic (plug and play) solution is proposed, which uses few resources thanks to virtualization through containerization. It takes care of identifying wired and wireless network devices. It generates a risk report with qualitative and quantitative values by reassessing the risk over time and provides mitigation if possible. Finally, a proof of concept was generated using a simulation of a medium-sized enterprise with various types of assets. As a result, we explored over 20 business days how network devices were detected and assessed without interacting with the framework, except to collect the results. It also showed how the risks evolve and increases if not addressed by the organization.
Keyword:
Virtualization
Risk
SME
Automatic
Framework
Open -source
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
8
论文数:
3.7K
被引数:
1.1W
机构
引用论文
Rare Case of Ulnar-Mammary-Like Syndrome With Left Ventricular Tachycardia and Lack of TBX3 Mutation
Cyber risk assessment in small and medium-sized enterprises: A multilevel decision-making approach for small e-tailors
RISK ANALYSIS
IF3.3
Evolution of Safety and Security Risk Assessment methodologies towards the use of Bayesian Networks in Process Industries在过程工业中使用贝叶斯网络的安全和安全风险评估方法的演变

