A risk analysis model for enterprise network

Abstract

For a long time, there existed only guidelines for network security risk analysis. In risk analysis, methodologies existed for calculating the risks or losses are based on statistical methods. However, as network intrusion is a man-made intentional event, statistical methods are not suitable for network security risk analysis. A concrete model, instead of guidelines, is needed. In this thesis, we describe models for analyzing network security and describe the methods that do not using statistical methods, for finding the risk/loss of a network by using our models.

Date of Award	2001
Original language	English
Awarding Institution	The Hong Kong University of Science and Technology