Projects per year
In this paper, the RISKEE method for evaluating risk in cyber security is described. RISKEE is based on attack graphs and the Diamond model combined with the FAIR method for assessing and calculating risk. It can be used to determine the risks of cyber-security attacks as a basis for decision-making. It works by forwarding estimations of attack frequencies and probabilities over an attack graph, calculating the risk at impact nodes with Monte-Carlo simulation, and propagating the resulting risk backward again. The method can be applied throughout all development phases and even be refined at runtime of a system. It involves system analysts, cyber security experts as well as domain experts for judgement of the attack frequencies, system vulnerabilities, and loss magnitudes.
|Title of host publication||Systems, Software and Services Process Improvement - 26th European Conference, EuroSPI 2019, Proceedings|
|Editors||Alastair Walker, Rory V. O’Connor, Richard Messnarz|
|Number of pages||12|
|Publication status||Published - Sept 2019|
|Event||26th European Conference on Systems, Software and Services Process Improvement: EuroSPI 2019 - Edinburgh, United Kingdom|
Duration: 18 Sept 2019 → 20 Sept 2019
|Name||Communications in Computer and Information Science|
|Conference||26th European Conference on Systems, Software and Services Process Improvement|
|Period||18/09/19 → 20/09/19|
- Attack trees
- Cyber physical security
- Diamond model
- FAIR method
- Risk assessment
- Risk propagation
ASJC Scopus subject areas
- Computer Science(all)
Fields of Expertise
- Information, Communication & Computing
FingerprintDive into the research topics of 'RISKEE: A Risk-Tree Based Method for Assessing Risk in Cyber Security'. Together they form a unique fingerprint.
Krisper, M., Macher, G., Dobaj, J., Krug, T. & Seidl, M.
1/09/12 → …
Project: Research area
AH-DHYAMONT - Control platform for hydro-electric power generation
Macher, G., Krisper, M., Dobaj, J. & Krug, T.
1/01/19 → 1/02/21
Project: Research project
AH-HyUnify-Erweiterung - Control platform for hydro-electric power generation
Macher, G., Krisper, M. & Dobaj, J.
1/10/18 → 31/03/19
Project: Research project
- 1 Talk at conference or symposium
26th European Conference on System, Software and Service Process Improvement & Innovation: EuroSPI 2019
Jürgen Dobaj (Speaker), Michael Krisper (Speaker), Georg Macher (Speaker) & Georg Macher (Keynote speaker)18 Sept 2019 → 20 Sept 2019
Activity: Talk or presentation › Talk at conference or symposium › Science to science