Title :
Analysis of actual IT security incident in an organization by using IT security implementation model
Author :
Sugiura, Masashi ; Suwa, Hirohiko ; Ohta, Toshizumi
Author_Institution :
NEC Corp., Univ. of Electro-Commun., Tokyo, Japan
Abstract :
A game-theory-based model of IT-security implementation in an organization was developed. The model consists of two players: an IT-security promotion section and an employee. The model is applied to an actual IT-security incident, the effect of the values of the model parameters on promotion of security implementation is analyzed, and what changes to the parameters are effective are determined. The results showed that this model has the potential for practical use.
Keywords :
game theory; information technology; security of data; IT security implementation model; IT-security promotion; actual IT security incident; game theory-based model; Accidents; Analytical models; Games; Loss measurement; Nash equilibrium; Organizations; Security; dilemma; game theory; model; organization; security;
Conference_Titel :
SICE Annual Conference (SICE), 2011 Proceedings of
Conference_Location :
Tokyo
Print_ISBN :
978-1-4577-0714-8
