Financial assurance program for incidents induced by Internet-based attacks in the financial services industry
Bel Gacem Raggad · WIT transactions on modelling and simulation · 2006
This paper furnishes an analytical model for the generation of a risk-driven financial assurance program capable of preventing, detecting, and responding to financial incidents (FAPG) for a general support system.Risk is defined in the paper as a basic belief assignment.The study reviews a single general support system with a known basic risk, integrating ids evidence and meta-evidence obtained from security management, in order to estimate the current system security risk position.The study shows the functioning of the FAPG, by generating a risk-driven financial assurance program, for a relatively small general support system in a firm in the financial services industry.This study is focused on financial incidents induced by Internet-based attacks but introduces a framework for further research.