Szczegóły publikacji
Opis bibliograficzny
Risk assessment for SWOP telemonitoring system based on fuzzy cognitive maps / Piotr SZWED, Paweł SKRZYŃSKI, Paweł GRODNIEWICZ // W: Multimedia communications, services and security : 6th International conference, MCSS 2013 : Krakow, Poland, June 6–7, 2013 : proceedings / eds. Andrzej Dziech, Andrzej Czyżewski. — Berlin ; Heidelberg : Springer-Verlag, cop. 2013. — (Communications in Computer and Information Science ; ISSN 1865-0929 ; 368). — ISBN: 978-3-642-38558-2; e-ISBN: 978-3-642-38559-9. — S. 233–247. — Bibliogr. s. 245–247, Abstr.
Autorzy (3)
Słowa kluczowe
Dane bibliometryczne
| ID BaDAP | 75069 |
|---|---|
| Data dodania do BaDAP | 2013-08-14 |
| DOI | 10.1007/978-3-642-38559-9_21 |
| Rok publikacji | 2013 |
| Typ publikacji | materiały konferencyjne (aut.) |
| Otwarty dostęp |  |
| Konferencja | Multimedia Communications, Services and Security 2013 |
| Czasopismo/seria | Communications in Computer and Information Science |
Abstract
For various IT systems security is considered to be a key quality factor. In particular, for health care systems security is of uttermost importance, as it is related to patients' health and safety. Risk assessment is an important activity in security management; it aims at identifying assets, threats and vulnerabilities, analysis of implemented countermeasures and their effectiveness in mitigating risks. This paper discusses a new risk assessment method, in which risk calculation is based on Fuzzy Cognitive Maps (FCMs) approach. FCMs are used to capture dependencies between assets and FCM based reasoning is applied to aggregate risks assigned to lower-level assets (e.g. hardware, software modules, communications, people) to such high level assets as services, maintained data and processes. An application of the method is studied on an example of e-health system providing remote telemonitoring, data storage and teleconsultation services. Lessons learned indicate, that the proposed method is an efficient and low-cost approach, giving instantaneous feedback and enabling reasoning on effectiveness of security system.
