Cyber-Risk Informatics

Engineering Evaluation with Data Science

Mehmet Sahinoglu

• Publisher: Wiley
• Year: 2016
• Print ISBN: 9781119087519
• eBook ISBN: 9781119087533
• Edition: 1
• Topic: Computer Science
• Subtopic: Computer Science General
• Index: Computer Science

This book provides a scientific modeling approach for conducting metrics-based quantitative risk assessments of cybersecurity vulnerabilities and threats.

This book provides a scientific modeling approach for conducting metrics-based quantitative risk assessments of cybersecurity threats. The author builds from a common understanding based on previous class-tested works to introduce the reader to the current and newly innovative approaches to address the maliciously-by-human-created (rather than by-chance-occurring) vulnerability and threat, and related cost-effective management to mitigate such risk. This book is purely statistical data-oriented (not deterministic) and employs computationally intensive techniques, such as Monte Carlo and Discrete Event  Simulation. The enriched JAVA ready-to-go applications and solutions to exercises provided by the author at the book's specifically preserved website will enable readers to utilize the course related problems.

• Enables the reader to use the book's website's applications to implement and see results, and use them making 'budgetary' sense

• Utilizes a data analytical approach and provides clear entry points for readers of varying skill sets and backgrounds

• Developed out of necessity from real in-class experience while teaching advanced undergraduate and graduate courses by the author

Cyber-Risk Informatics is a resource for undergraduate students, graduate students, and practitioners in the field of Risk Assessment and Management regarding Security and Reliability Modeling.

Mehmet Sahinoglu, a Professor (1990) Emeritus (2000), is the founder of the Informatics Institute (2009) and its SACS-accredited (2010) and NSA-certified (2013) flagship Cybersystems and Information Security (CSIS) graduate program (the first such full degree in-class program in Southeastern USA) at AUM, Auburn University's metropolitan campus in Montgomery, Alabama. He is a fellow member of the SDPS Society, a senior member of the IEEE, and an elected member of ISI. Sahinoglu is the recipient of Microsoft's Trustworthy Computing Curriculum (TCC) award and the author of Trustworthy Computing (Wiley, 2007).

 

1
METRICS, STATISTICAL QUALITY CONTROL, AND BASIC RELIABILITY IN CYBER-RISK

---

LEARNING OBJECTIVES

• Operating characteristic curves and Acceptance Sampling in quality control
• User-friendly Pedagogue applications for component and system reliability fundamentals including major software reliability techniques
• Basic reliability concepts and their equations
• Popular statistical distributions used in reliability and their Monte Carlo (MC) simulators

---

1.1 DETERMINISTIC AND STOCHASTIC CYBER-RISK METRICS

Informatics is the study of automation of information, and it is derived from the merging of two concepts, information and automatics. The first part of Cyber-Risk Informatics, that is, cyber, is derived from the ancient Hellenic word “kybernesis” (or cybernetics, the science of communications and automatic control systems in both machines and living things) to mean to “control skills,” later evolving to the Latin word “gubernare,” which is “govern” in English. Cyber-Risk Informatics is, therefore, control or governance of information risk in the computing world in an automated way. In today’s cyber-risk world, there exist as many metric definitions as there are celestial suns in the universe mainly due to a lack of standardization. We will focus on the software science metrics in this chapter since the hardware metrics will be mostly computer and electrical, and more importantly, traditional semiconductor engineering-oriented metrics that would simply be beyond the scope of this book. There also exist those deterministic metrics, such as Halstead’s software scie...

Table of contents

• COVER
• TITLE PAGE
• TABLE OF CONTENTS
• ABOUT THE COVER
• PROLOGUE
• REVIEWS
• PREFACE
• ACKNOWLEDGMENTS AND DEDICATION
• ABOUT THE AUTHOR
• 1 METRICS, STATISTICAL QUALITY CONTROL, AND BASIC RELIABILITY IN CYBER-RISK
• 2 COMPLEX NETWORK RELIABILITY EVALUATION AND ESTIMATION IN CYBER-RISK
• 3 STOPPING RULES FOR RELIABILITY AND SECURITY TESTS IN CYBER-RISK
• 4 SECURITY ASSESSMENT AND MANAGEMENT IN CYBER-RISK
• 5 GAME-THEORETIC COMPUTING IN CYBER-RISK
• 6 MODELING AND SIMULATION IN CYBER-RISK
• 7 CLOUD COMPUTING IN CYBER-RISK
• 8 SOFTWARE RELIABILITY MODELING AND METRICS IN CYBER-RISK
• 9 METRICS FOR SOFTWARE RELIABILITY FAILURE-COUNT MODELS IN CYBER-RISK
• 10 PRACTICAL HANDS-ON LAB TOPICS IN CYBER-RISK
• WHAT THE CYBER-RISK INFORMATICS TEXTBOOK AND THE AUTHOR ARE ABOUT?
• INDEX
• END USER LICENSE AGREEMENT