{"page":"289-304","type":"conference","file_date_updated":"2018-12-13T15:20:03Z","publication":"Sicherheit 2010 : Sicherheit, Schutz und Zuverl{\\\"a}ssigkeit ; Konferenzband der 5. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin","date_created":"2018-11-14T14:35:59Z","status":"public","author":[{"full_name":"Schryen, Guido","last_name":"Schryen","first_name":"Guido","id":"72850"}],"_id":"5642","intvolume":"       170","year":"2010","ddc":["000"],"volume":170,"abstract":[{"lang":"eng","text":"This paper presents a fuzzy set based decision support model for taking uncertainty into account when making security investment decisions for distributed systems. The proposed model is complementary to robabilistic approaches and useful in situations where probabilistic information is either unavailable or not appropriate to reliably predict future conditions. We ?rst present the speci?cation of a formal security language that allows to specify under which conditions a distributed system is protected against security violations. We show that each term of the security language can be transformed into an equivalent propositional logic term. Then we use propositional logic terms to de?ne a fuzzy set based decision model. This optimization model incorporates uncertainty with regard to the impact of investments on the achieved security levels of components of the distributed system. The model also accounts for budget and security constraints, in order to be applicable in practice."}],"file":[{"date_updated":"2018-12-13T15:20:03Z","file_size":372660,"creator":"hsiemes","file_name":"security_fuzzy_LNI Version.pdf","content_type":"application/pdf","relation":"main_file","file_id":"6190","access_level":"open_access","date_created":"2018-12-11T15:22:12Z"}],"oa":"1","place":"Bonn","title":"A Fuzzy Model for IT Security Investments","has_accepted_license":"1","date_updated":"2022-01-06T07:02:18Z","extern":"1","language":[{"iso":"eng"}],"editor":[{"first_name":"Felix","last_name":"C. Freiling","full_name":"C. Freiling, Felix"}],"series_title":"GI-Edition: lecture notes in informatics. Proceedings","department":[{"_id":"277"}],"citation":{"mla":"Schryen, Guido. “A Fuzzy Model for IT Security Investments.” <i>Sicherheit 2010 : Sicherheit, Schutz Und Zuverl{\\\"a}ssigkeit ; Konferenzband Der 5. Jahrestagung Des Fachbereichs Sicherheit Der Gesellschaft F{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin</i>, edited by Felix C. Freiling, vol. 170, Gesellschaft für Informatik, 2010, pp. 289–304.","ieee":"G. Schryen, “A Fuzzy Model for IT Security Investments,” in <i>Sicherheit 2010 : Sicherheit, Schutz und Zuverl{\\\"a}ssigkeit ; Konferenzband der 5. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin</i>, 2010, vol. 170, pp. 289–304.","apa":"Schryen, G. (2010). A Fuzzy Model for IT Security Investments. In F. C. Freiling (Ed.), <i>Sicherheit 2010 : Sicherheit, Schutz und Zuverl{\\\"a}ssigkeit ; Konferenzband der 5. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin</i> (Vol. 170, pp. 289–304). Bonn: Gesellschaft für Informatik.","short":"G. Schryen, in: F. C. Freiling (Ed.), Sicherheit 2010 : Sicherheit, Schutz Und Zuverl{\\\"a}ssigkeit ; Konferenzband Der 5. Jahrestagung Des Fachbereichs Sicherheit Der Gesellschaft F{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin, Gesellschaft für Informatik, Bonn, 2010, pp. 289–304.","ama":"Schryen G. A Fuzzy Model for IT Security Investments. In: C. Freiling F, ed. <i>Sicherheit 2010 : Sicherheit, Schutz Und Zuverl{\\\"a}ssigkeit ; Konferenzband Der 5. Jahrestagung Des Fachbereichs Sicherheit Der Gesellschaft F{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin</i>. Vol 170. GI-Edition: lecture notes in informatics. Proceedings. Bonn: Gesellschaft für Informatik; 2010:289-304.","chicago":"Schryen, Guido. “A Fuzzy Model for IT Security Investments.” In <i>Sicherheit 2010 : Sicherheit, Schutz Und Zuverl{\\\"a}ssigkeit ; Konferenzband Der 5. Jahrestagung Des Fachbereichs Sicherheit Der Gesellschaft F{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin</i>, edited by Felix C. Freiling, 170:289–304. GI-Edition: Lecture Notes in Informatics. Proceedings. Bonn: Gesellschaft für Informatik, 2010.","bibtex":"@inproceedings{Schryen_2010, place={Bonn}, series={GI-Edition: lecture notes in informatics. Proceedings}, title={A Fuzzy Model for IT Security Investments}, volume={170}, booktitle={Sicherheit 2010 : Sicherheit, Schutz und Zuverl{\\\"a}ssigkeit ; Konferenzband der 5. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\\\"u}r Informatik e.V. (GI), 5. - 7. Oktober 2010 in Berlin}, publisher={Gesellschaft für Informatik}, author={Schryen, Guido}, editor={C. Freiling, FelixEditor}, year={2010}, pages={289–304}, collection={GI-Edition: lecture notes in informatics. Proceedings} }"},"publisher":"Gesellschaft für Informatik","user_id":"61579"}