DARIS: A probabilistic model for dependency analysis of risks in information security

Abstract

This paper presents an abstract concept of security planning processes using a simple probabilistic model to express conditional risk factors. This analytical work emphasizes relationships related to major security planning phases. The work discusses the chain of logical events that describe dependence in risk propagation. This unique work can provide a guidance for security planning and risk management applicable to various engineering fields. Especially, for security education, we need to provide approaches that are theoretically sound as well as practical and realistic. The risk analysis method provided by DARIS can also provide a theoretical basis in education of information security. © 2008 Atilla Elçi.