We found a match
Your institution may have access to this item. Find your institution then sign in to continue.
- Title
Cloud Enterprise Dynamic Risk Assessment (CEDRA): a dynamic risk assessment using dynamic Bayesian networks for cloud environment.
- Authors
Behbehani, Dawood; Komninos, Nikos; Al-Begain, Khalid; Rajarajan, Muttukrishnan
- Abstract
Cloud computing adoption has been increasing rapidly amid COVID-19 as organisations accelerate the implementation of their digital strategies. Most models adopt traditional dynamic risk assessment, which does not adequately quantify or monetise risks to enable business-appropriate decision-making. In view of this challenge, a new model is proposed in this paper for assignment of monetary losses terms to the consequences nodes, thereby enabling experts to understand better the financial risks of any consequence. The proposed model is named Cloud Enterprise Dynamic Risk Assessment (CEDRA) model that uses CVSS, threat intelligence feeds and information about exploitation availability in the wild using dynamic Bayesian networks to predict vulnerability exploitations and financial losses. A case study of a scenario based on the Capital One breach attack was conducted to demonstrate experimentally the applicability of the model proposed in this paper. The methods presented in this study has improved vulnerability and financial losses prediction.
- Subjects
CAPITAL One Financial Corp.; BAYESIAN analysis; RISK assessment; COVID-19 pandemic; FINANCIAL risk; CLOUD computing
- Publication
Journal of Cloud Computing (2192-113X), 2023, Vol 12, Issue 1, p1
- ISSN
2192-113X
- Publication type
Article
- DOI
10.1186/s13677-023-00454-2