Selecting optimal subset of security controls
Choosing an optimal investment in information security is an issue most companies face these days. Which security controls to buy to protect the IT system of a company in the best way? Selecting a subset of security controls among many available ones can be seen as a resource allocation problem that should take into account conflicting objectives and constraints of the problem. In particular, the security of the system should be improved without hindering productivity, under a limited budget for buying controls. In this work, we provide several possible formulations of security controls subset selection problem as a portfolio optimization, which is well known in financial management. We propose approaches to solve them using existing single and multiobjective optimization algorithms.
Open Access journal
Citation : Yevseyeva, I., Basto-Fernandes, V., Emmerich, M.T.M. and van Moorsel A. (2015) Selecting optimal subset of security controls. CENTERIS’15, 7th Conference of ENTERprise Information Systems, Procedia Computer Science, 64, pp. 1035-1042
Research Group : Cyber Security Centre
Research Institute : Cyber Technology Institute (CTI)
Peer Reviewed : Yes