AVARCIBER: a framework for assessing cibersecurity risks

Rea-Guaman, Ángel Marcelo and Mejía, Jezreel and San Feliu Gilabert, Tomás and Calvo-Manzano Villalón, José Antonio (2020). AVARCIBER: a framework for assessing cibersecurity risks. "Cluster Computing: The Journal of Networks, Software Tools and Applications" ; pp. 1-19. ISSN 1386-7857. https://doi.org/10.1007/s10586-019-03034-9.

Description

Title: AVARCIBER: a framework for assessing cibersecurity risks
Author/s:
  • Rea-Guaman, Ángel Marcelo
  • Mejía, Jezreel
  • San Feliu Gilabert, Tomás
  • Calvo-Manzano Villalón, José Antonio
Item Type: Article
Título de Revista/Publicación: Cluster Computing: The Journal of Networks, Software Tools and Applications
Date: 1 January 2020
ISSN: 1386-7857
Subjects:
Freetext Keywords: Cybersecurity framework; Cybersecurity vulnerabilities; Cybersecurity threats
Faculty: E.T.S. de Ingenieros Informáticos (UPM)
Department: Lenguajes y Sistemas Informáticos e Ingeniería del Software
Creative Commons Licenses: Recognition - No derivative works - Non commercial

Full text

[img]
Preview
PDF - Requires a PDF viewer, such as GSview, Xpdf or Adobe Acrobat Reader
Download (837kB) | Preview

Abstract

The identification and assessment of risks are a fundamental part of cybersecurity. Determining the elements that participate in this field is difficult because there is no exclusive approach to cybersecurity. This document aims to provide a framework to identify and assess cybersecurity risks. For this, a systematic review of the studies related to cybersecurity risk taxonomies was carried out. The main elements of the proposed conceptual model and framework have been determined by applying the snowball technique. To validate the implementation of the proposed framework, a case study has been implemented at the Ecuadorian Social Security Institute. The first task was to consolidate the information in a baseline. Once the baseline was obtained, the defined framework has been applied. As a result, through the use of the proposed framework, the assessment process has improved the decision-making process regarding the importance and criticality of the risks and countermeasures that must be applied.

More information

Item ID: 62899
DC Identifier: http://oa.upm.es/62899/
OAI Identifier: oai:oa.upm.es:62899
DOI: 10.1007/s10586-019-03034-9
Official URL: https://link.springer.com/article/10.1007/s10586-019-03034-9
Deposited by: Memoria Investigacion
Deposited on: 04 Sep 2020 08:38
Last Modified: 04 Sep 2020 08:38
  • Logo InvestigaM (UPM)
  • Logo GEOUP4
  • Logo Open Access
  • Open Access
  • Logo Sherpa/Romeo
    Check whether the anglo-saxon journal in which you have published an article allows you to also publish it under open access.
  • Logo Dulcinea
    Check whether the spanish journal in which you have published an article allows you to also publish it under open access.
  • Logo de Recolecta
  • Logo del Observatorio I+D+i UPM
  • Logo de OpenCourseWare UPM