For security operations to extensively cover all vulnerabilities when deploying countermeasures, risk assessment tools are necessary to supplement Security Information and Event Management (SIEM) tools and Endpoint detection and response (EDR) technology. Our research focuses on understanding the risk assessment methods and techniques that are used to evaluate systems unavailability in Data Centers (DC) which will improve software product development process. It seeks to develop the Event Tree (ET) and Fault Tree (FT), compare the strengths and weaknesses of each, discuss potential countermeasures against system unavailability related risks in a Data Center and synergize the two techniques to build a heuristic hybrid bow and tie framework. The paper will conclude by culminating the opportunities of a hybrid integrated solution to evaluate risks related to the Data Center. A Risk Assessment Survey (RAS) is developed to augment and improve the efficacy of the proposed hybrid risk assessment framework. The results show that the hybrid framework developed was effective in assessing risks that may occur as a result of system unavailability in the Data Center which indicates that the framework developed is efficient, robust and scalable.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Hybrid Risk Assessment Technique for Data Centers

  • Lorna Kangethe,
  • Lei Chen

摘要

For security operations to extensively cover all vulnerabilities when deploying countermeasures, risk assessment tools are necessary to supplement Security Information and Event Management (SIEM) tools and Endpoint detection and response (EDR) technology. Our research focuses on understanding the risk assessment methods and techniques that are used to evaluate systems unavailability in Data Centers (DC) which will improve software product development process. It seeks to develop the Event Tree (ET) and Fault Tree (FT), compare the strengths and weaknesses of each, discuss potential countermeasures against system unavailability related risks in a Data Center and synergize the two techniques to build a heuristic hybrid bow and tie framework. The paper will conclude by culminating the opportunities of a hybrid integrated solution to evaluate risks related to the Data Center. A Risk Assessment Survey (RAS) is developed to augment and improve the efficacy of the proposed hybrid risk assessment framework. The results show that the hybrid framework developed was effective in assessing risks that may occur as a result of system unavailability in the Data Center which indicates that the framework developed is efficient, robust and scalable.