{"id":"https://openalex.org/W2895200039","doi":null,"title":"Proactive risk management in information systems","display_name":"Proactive risk management in information systems","publication_year":2018,"publication_date":"2018-09-28","ids":{"openalex":"https://openalex.org/W2895200039","mag":"2895200039"},"language":"en","primary_location":{"id":"mag:2895200039","doi":null,"is_oa":false,"landing_page_url":"http://eprints.fri.uni-lj.si/4273/","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038896911","display_name":"Andrej Dobrovoljc","orcid":"https://orcid.org/0000-0002-5365-1718","observed_orcids":["https://orcid.org/0000-0002-5365-1718"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Andrej Dobrovoljc","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-5365-1718","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5038896911"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5547000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5547000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.4431000053882599,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/proactive-risk-management","display_name":"proactive risk management","score":0.8080000281333923},{"id":"https://openalex.org/keywords/software-vulnerabilities","display_name":"software vulnerabilities","score":0.597000002861023},{"id":"https://openalex.org/keywords/vulnerability-prioritization","display_name":"vulnerability prioritization","score":0.9980000257492065},{"id":"https://openalex.org/keywords/cvss","display_name":"CVSS","score":0.8059999942779541},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":0.5669999718666077},{"id":"https://openalex.org/keywords/valuation-models","display_name":"valuation models","score":0.6930000185966492},{"id":"https://openalex.org/keywords/information-systems-security","display_name":"information systems security","score":0.6869999766349792}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6964855790138245},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6383309960365295},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6200209856033325},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.5566059947013855},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.5246227979660034},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5114861726760864},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.45350033044815063},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.43713656067848206},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4095761477947235},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2339739203453064},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.21503108739852905},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2895200039","doi":null,"is_oa":false,"landing_page_url":"http://eprints.fri.uni-lj.si/4273/","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2765999687","https://openalex.org/W2983519477","https://openalex.org/W6997207307","https://openalex.org/W7127587807","https://openalex.org/W4416740912","https://openalex.org/W4406744563","https://openalex.org/W3206487040","https://openalex.org/W4413399998","https://openalex.org/W2967263059","https://openalex.org/W3199469813"],"abstract_inverted_index":{"Managing":[0],"security":[1,43,51,106],"risks":[2],"is":[3,45,124,133,139,158,171,177],"one":[4],"of":[5,35,61,68,105,144,151,164,169,185,263,281],"the":[6,17,73,102,135,148,152,162,167,183,236,242,261],"major":[7],"challenges":[8,154],"in":[9,72,100,147,155,209,277,284],"modern":[10],"information":[11,282],"systems.":[12],"Threats":[13],"often":[14],"come":[15],"via":[16],"World":[18],"Wide":[19],"Web":[20],"and":[21,37,59],"are":[22,70,265],"therefore":[23,159],"difficult":[24],"to":[25,77,83,160,179,202,206],"predict.":[26],"Thus,":[27],"attackers":[28,264],"can":[29,53,107],"always":[30],"be":[31,54,78,96,108,203],"a":[32,65,87,117,141,173,218],"step":[33],"ahead":[34],"us":[36],"reactive":[38],"approach":[39],"based":[40,115],"on":[41],"known":[42],"incidents":[44],"not":[46,140],"sufficient.":[47],"A":[48],"much":[49],"higher":[50],"level":[52,104],"achieved":[55],"by":[56],"active":[57],"detection":[58],"neutralization":[60],"software":[62],"vulnerabilities.":[63],"When":[64],"large":[66],"number":[67],"vulnerabilities":[69,94],"present":[71],"system,":[74],"they":[75],"have":[76,201,216],"prioritized":[79],"for":[80,127,192],"removal":[81],"according":[82,205],"their":[84,207],"severity.":[85],"With":[86],"proactive":[88],"approach,":[89],"where":[90],"we":[91,215,244],"foresee":[92],"which":[93,227,257],"will":[95],"more":[97,267],"likely":[98],"exploited":[99],"practice,":[101],"highest":[103],"assured.":[109],"\r\nA":[110],"widely":[111],"used":[112,245],"prioritization":[113],"policy":[114],"upon":[116],"CVSS":[118,136],"(Common":[119],"Vulnerability":[120],"Scoring":[121],"System)":[122],"score":[123,137],"frequently":[125],"criticised":[126],"bad":[128],"effectiveness.":[129],"The":[130,272],"main":[131],"reason":[132],"that":[134,195,221,255],"alone":[138],"good":[142],"predictor":[143],"vulnerability":[145,170,246],"exploitation":[146,168],"wild.":[149],"One":[150],"key":[153],"this":[156,197,213],"area":[157],"identify":[161],"indicators":[163],"exploitation.":[165],"Since":[166],"basically":[172],"human":[174,231],"threat,":[175],"it":[176],"reasonable":[178],"take":[180,196,228,258],"into":[181,198,229,259],"account":[182,230,260],"characteristics":[184,262],"typical":[186],"attackers.":[187],"We":[188],"propose":[189],"several":[190],"methods":[191,256],"setting":[193],"priorities":[194],"account.":[199],"Methods":[200],"compared":[204,234],"effectiveness":[208,273],"risk":[210],"mitigation.":[211],"To":[212],"end,":[214],"developed":[217],"valuation":[219],"model":[220],"allows":[222],"such":[223],"comparisons.":[224],"Proposed":[225],"methods,":[226],"threats,":[232],"were":[233],"with":[235],"most":[237],"popular":[238],"existing":[239,270],"methods.":[240,271],"In":[241],"experiment":[243],"data":[247],"from":[248],"publicly":[249],"available":[250],"databases.":[251],"Experimental":[252],"results":[253],"show":[254],"generally":[266],"effective":[268],"than":[269],"was":[274],"also":[275],"confirmed":[276],"some":[278],"real":[279],"cases":[280],"systems":[283],"practice.":[285]},"counts_by_year":[],"updated_date":"2025-11-06T04:12:42.849631","created_date":"2018-10-12T00:00:00"}