Instructor: Yashwnt K. Malaiya
Email: malaiya\uff20colostate.edu
Phone: 970-491-7031 (messages)
<\/p>\n\n\n\n
Course objectives<\/strong>: <\/p>\n\n\n\n The course provides an integrated framework for Quantitative Evaluation and management of Security Risk. It draws from the fields of security (vulnerabilities, their discovery, and exploitation, security metrics), Reliability, Testing, and Risk evaluation. The integration provides a systematic terminology and a rigorous framework for evaluating mathematical or systematic risk by identifying its specific components, as well as the likely return on risk mitigation efforts.<\/p>\n\n\n\n Quantitative data regarding the key aspects of security risk is becoming available. While the data is still limited, it can be used to assess the components of the security risk and potential mitigation approaches. The framework will allow additional data to be incorporated into the framework when it becomes available. In some cases, the available data may not be enough for rigorous modeling; however, it can be used to assess the magnitude of the risk components.<\/p>\n\n\n\n Framework: <\/strong>The published quantitative risk evaluation methods often focus on specific components of the risk. The course will provide an integrated perspective by combining diverse analyses and reports using a systematic framework. Since this is a developing field, the data, models, and techniques are still emerging. The course has a research component that requires the students to read and discuss assigned and self-selected papers and to work on a research project.<\/p>\n\n\n\n Topics:<\/strong><\/p>\n\n\n\n The students will be assigned to read selected papers and discuss the contributions. A term research project is required. Potential topics will be identified.<\/p>\n\n\n\n\n