 |
 |
Morali, A. and Zambon, Emmanuele and Etalle, S. and Wieringa, R.J.
(2009)
CRAC: Confidentiality Risk Analysis and IT-Architecture Comparison of Business Networks (extended version).
Technical Report TR-CTIT-09-30,
Centre for Telematics and Information Technology University of Twente, Enschede.
ISSN 1381-3625
Full text available as:  AbstractThe leakage of confidential information (e.g. industrial secrets, patient records and user credentials) is one of the risks that have to be accounted for and mitigated by organizations dealing with confidential data. Unfortunately, assessing confidentiality risk is challenging, particularly in the presence of cross- organization cooperation, like in the case of outsourcing. This is due to the complexity of business networks. This paper presents an IT-architecture based method for assessing and comparing confidentiality risks of IT-based business networks from the perspective of one of the organizations in the network. | Item Type: | Internal Report (Technical Report) |
|---|
| Research Group: | EWI-DIES: Distributed and Embedded Security, EWI-IS: Information Systems |
|---|
| Research Program: | CTIT-ISTRICE: Integrated Security and Privacy in a Networked World |
|---|
| Research Project: | VRIEND: Value-Based Security Risk Mitigation in Enterprise Networks that are Decentralized |
|---|
| Uncontrolled Keywords: | Risk Assessment, Confidentiality, IT-Architecture, Networked Organizations |
|---|
| ID Code: | 16067 |
|---|
| Deposited On: | 04 October 2009 |
|---|
| More Information: | statisticsmetis |
|---|
Export this item as: To correct this item please ask your editor Repository Staff Only: edit this item
|
 |
 |