Modeling of enterprise management structure for data leakage evaluation
Laima Kaušpadienė, Simona Ramanauskaitė, Antanas Čenys, Justinas Janulevičius, Justinas Rastenis · Information Security Journal A Global Perspective · 2018
Modern organizations strongly rely on various forms of data, ranging from communication technologies to bookkeeping and manufacturing. It is a crucial asset of any enterprise, requiring special attention security-wise. One of the data security areas currently in focus is data leakage. It may occur due to malicious attacks, human error, unintentional data sharing, etc. Therefore it is important to predict all data leakage possibilities and prevent them. This paper proposes an Enterprise Management Structure (EMS) model for information flow data leakage probability estimation. The model evaluates the probability of data leakage according to possible human error and summarized security properties for data processing and transfer. Four different versions of small EMS are analyzed using the proposed model. The study concludes that its results meet expert evaluation tendencies and correlate with Bell-LaPadula confidentiality model.