scholarly journals Vulnerability management using a formalized description

Radiotekhnika ◽  
2020 ◽  
pp. 121-125
Author(s):  
V.O. Poddubnyi ◽  
O.V. Severinov

The article considers the main stages of vulnerability management and the problems arising in risk assessment and decision making during vulnerability management in the information and telecommunications system. It is assumed that modern techniques are not sufficient for effective vulnerability management. There is a need for creating a risk assessment system to improve decision-making procedures. The comparison of the formalized and informal description of the information and telecommunication system is described. The conclusion from the comparison results is that the formalized description has a number of advantages, so it is necessary that it should be built based on a formalized description of the information and telecommunication system. When adding qualitative vulnerability assessments (such as Common Vulnerability Scoring System vulnerabilities), this system will be unambiguous, clear, flexible, and easy to use. An additional advantage of such a system is the ability to automate assessment and decision-making processes, which will eliminate human influence and minimize the subjective factor in the management of vulnerabilities in the information and telecommunications system. Such a system will not exclude the influence of the security administrator, but will help him in decision-making, risk assessment, reduce the likelihood of errors, will help new staff in choosing decisions.

Author(s):  
Alexandros Flamos ◽  
Christos V. Roupas ◽  
John Psarras

Throughout the last two decades many attempts took place in order policy makers and researchers to be able to measure the energy security of supply of a particular country, region and corridor. This chapter is providing an overview presentation of the Energy Security Risk Assessment System (E.S.R.A.S.) which comprises the Module of Robust Decision Making (RDM) and the Module of Energy Security Indices Calculation (ESIC). Module 1 & 2 are briefly presented throughout section 2 and the application of Module 2 in nine case study countries is discussed at section 3. Finally, in the last section are the conclusions, which summarize the main points, arisen in this chapter.


2020 ◽  
Author(s):  
Michael R. Bronsert ◽  
Anne Lambert-Kerzner ◽  
William G. Henderson ◽  
Karl E. Hammermeister ◽  
Chisom Atuanya ◽  
...  

Abstract Background Risk assessment is essential to informed decision making in surgery. Preoperative use of the Surgical Risk Preoperative Assessment System (SURPAS) providing individualized risk assessment, may enhance informed consent. We assessed patient and provider perceptions of SURPAS as a risk assessment tool. Methods A convergent mixed-methods study assessed SURPAS’s trial implementation, concurrently collecting quantitative and qualitative data, separately analyzing it, and integrating the results. Patients and providers were surveyed and interviewed on their opinion of how SURPAS impacted the preoperative encounter. Relationships between patient risk and patient and provider assessment of SURPAS were examined. Results 197 patients were provided their SURPAS postoperative risk estimates in nine surgeon’s clinics. 98.8% of patients reported they understood their surgical risks very or quite well after exposure to SURPAS; 92.7% reported SURPAS was very helpful or helpful. 83.4% of the time providers reported SURPAS was very or somewhat helpful; 44.7% of the time the providers reported it changed their interaction with the patient and this change was beneficial 94.3% of the time. As patient risk increased, providers reported that SURPAS was increasingly helpful (p<0.0001).Conclusions Patients and providers reported the use of SURPAS helpful and informative during the preoperative risk assessment of patients, thus improving the surgical decision making process. Patients thought that SURPAS was helpful regardless of their risk level, whereas providers thought that SURPAS was more helpful in higher risk patients.


2020 ◽  
Author(s):  
Michael R. Bronsert ◽  
Anne Lambert-Kerzner ◽  
William G. Henderson ◽  
Karl E. Hammermeister ◽  
Chisom Atuanya ◽  
...  

Abstract Background: Risk assessment is essential to informed decision making in surgery. Preoperative use of the Surgical Risk Preoperative Assessment System (SURPAS) providing individualized risk assessment, may enhance informed consent. We assessed patient and provider perceptions of SURPAS as a risk assessment tool.Methods: A convergent mixed-methods study assessed SURPAS’s trial implementation, concurrently collecting quantitative and qualitative data, separately analyzing it, and integrating the results. Patients and providers were surveyed and interviewed on their opinion of how SURPAS impacted the preoperative encounter. Relationships between patient risk and patient and provider assessment of SURPAS were examined.Results: A total of 197 patients were provided their SURPAS postoperative risk estimates in nine surgeon’s clinics. Of the total patients, 98.8% reported they understood their surgical risks very or quite well after exposure to SURPAS; 92.7% reported SURPAS was very helpful or helpful. Providers shared that 83.4% of the time they reported SURPAS was very or somewhat helpful; 44.7% of the time the providers reported it changed their interaction with the patient and this change was beneficial 94.3% of the time. As patient risk increased, providers reported that SURPAS was increasingly helpful (p<0.0001).Conclusions: Patients and providers reported the use of SURPAS helpful and informative during the preoperative risk assessment of patients, thus improving the surgical decision making process. Patients thought that SURPAS was helpful regardless of their risk level, whereas providers thought that SURPAS was more helpful in higher risk patients.


Agronomie ◽  
2003 ◽  
Vol 23 (1) ◽  
pp. 75-84 ◽  
Author(s):  
Andy Hart ◽  
Colin D. Brown ◽  
Kathy A. Lewis ◽  
John Tzilivakis

Author(s):  
Bogdan Korniyenko ◽  
Lilia Galata

In this article, the research of information system protection by ana­ ly­ zing the risks for identifying threats for information security is considered. Information risk analysis is periodically conducted to identify information security threats and test the information security system. Currently, various information risk analysis techni­ ques exist and are being used, the main difference being the quantitative or qualitative risk assessment scales. On the basis of the existing methods of testing and evaluation of the vulnerabilities for the automated system, their advantages and disadvantages, for the possibility of further comparison of the spent resources and the security of the information system, the conclusion was made regarding the deter­ mi­ nation of the optimal method of testing the information security system in the context of the simulated polygon for the protection of critical information resources. A simula­ tion ground for the protection of critical information resources based on GNS3 application software has been developed and implemented. Among the considered methods of testing and risk analysis of the automated system, the optimal iRisk methodology was identified for testing the information security system on the basis of the simulated. The quantitative method Risk for security estimation is considered. Generalized iRisk risk assessment is calculated taking into account the following parameters: Vulnerabili­ ty  — vulnerability assessment, Threat — threat assessment, Control — assessment of security measures. The methodology includes a common CVSS vul­ nerability assessment system, which allows you to use constantly relevant coefficients for the calculation of vulnerabilities, as well as have a list of all major vulnerabilities that are associated with all modern software products that can be used in the automated system. The known software and hardware vulnerabilities of the ground are considered and the resistance of the built network to specific threats by the iRisk method is calculated.


Water ◽  
2019 ◽  
Vol 11 (4) ◽  
pp. 649 ◽  
Author(s):  
Quansen Wang ◽  
Jianzhong Zhou ◽  
Kangdi Huang ◽  
Ling Dai ◽  
Gang Zha ◽  
...  

The risk inevitably exists in the process of flood control operation and decision-making of reservoir group, due to the hydrologic and hydraulic uncertain factors. In this study different stochastic simulation methods were applied to simulate these uncertainties in multi-reservoir flood control operation, and the risk caused by different uncertainties was evaluated from the mean value, extreme value and discrete degree of reservoir occupied storage capacity under uncertain conditions. In order to solve the conflict between risk assessment indexes and evaluate the comprehensive risk of different reservoirs in flood control operation schemes, the subjective weight and objective weight were used to construct the comprehensive risk assessment index, and the improved Mahalanobis distance TOPSIS method was used to select the optimal flood control operation scheme. The proposed method was applied to the flood control operation system in the mainstream and its tributaries of upper reaches of the Yangtze River basin, and 14 cascade reservoirs were selected as a case study. The results indicate that proposed method can evaluate the risk of multi-reservoir flood control operation from all perspectives and provide a new method for multi-criteria decision-making of reservoir flood control operation, and it breaks the limitation of the traditional risk analysis method which only evaluated by risk rate and cannot evaluate the risk of the multi-reservoir flood control operation system.


Author(s):  
Sahinya Susindar ◽  
Harrison Wissel-Littmann ◽  
Terry Ho ◽  
Thomas K. Ferris

In studying naturalistic human decision-making, it is important to understand how emotional states shape decision-making processes and outcomes. Emotion regulation techniques can improve the quality of decisions, but there are several challenges to evaluating these techniques in a controlled research context. Determining the effectiveness of emotion regulation techniques requires methodology that can: 1) reliably elicit desired emotions in decision-makers; 2) include decision tasks with response measures that are sensitive to emotional loading; and 3) support repeated exposures/trials with relatively-consistent emotional loading and response sensitivity. The current study investigates one common method, the Balloon Analog Risk Task (BART), for its consistency and reliability in measuring the risk-propensity of decision-makers, and specifically how the method’s effectiveness might change over the course of repeated exposures. With the PANASX subjective assessment serving for comparison, results suggest the BART assessment method, when applied over repeated exposures, is reduced in its sensitivity to emotional stimuli and exhibits decision task-related learning effects which influence the observed trends in response data in complex ways. This work is valuable for researchers in decision-making and to guide design for humans with consideration for their affective states.


Sign in / Sign up

Export Citation Format

Share Document