Title :
eTVRA, a Threat, Vulnerability and Risk Assessment Method and Tool for eEurope
Author :
Rossebø, Judith E Y ; Cadzow, Scott ; Sijben, Paul
Author_Institution :
Dept. of Telematics, NTNU, Fornebu
Abstract :
The telecommunications environment is evolving into next generation networks (NGN). On an NGN, telecommunications services are recreated on IP networks, this creates a demand on standardization bodies to adapt and meet the needs of these emerging networks. Securing the service environment for eBusiness and the underlying network are crucial areas cited in the eEurope action plan. Standardization provides an important means for securing the NGN and establishing trust in its services and infrastructure in order to enable the development of modern public services. In response to this, we have developed a threat, vulnerability and risk assessment (eTVRA) method and tool for use in standardisation. Using the eTVRA method and tool, the threats to NGNs can be analyzed and a set of recommended countermeasures identified that when implemented will reduce the overall risk to users of NGNs. In this paper we present the eTVRA method and tool along with the results of its application to the use of enhanced number (ENUM) (Eastlake, 1999) and SIP (Rosenberg et al., 2002) in the NGN
Keywords :
IP networks; business data processing; government data processing; public administration; risk management; security of data; standardisation; telecommunication security; telecommunication services; IP networks; eBusiness; eEurope; enhanced number; next generation networks; public service; risk assessment; service environment security; standardization; telecommunication environment; telecommunication services; threat assessment; vulnerability assessment; Information security; Next generation networking; Prototypes; Risk analysis; Risk management; Standardization; Standards development; Standards organizations; Telecommunication standards; Telematics;
Conference_Titel :
Availability, Reliability and Security, 2007. ARES 2007. The Second International Conference on
Conference_Location :
Vienna
Print_ISBN :
0-7695-2775-2
DOI :
10.1109/ARES.2007.82