{"id":"https://openalex.org/W2154487572","doi":"https://doi.org/10.1109/aiccsa.2009.5069434","title":"Security risk analysis based on probability of system failure, attacks and vulnerabilities","display_name":"Security risk analysis based on probability of system failure, attacks and vulnerabilities","publication_year":2009,"publication_date":"2009-01-01","ids":{"openalex":"https://openalex.org/W2154487572","doi":"https://doi.org/10.1109/aiccsa.2009.5069434","mag":"2154487572"},"language":"en","primary_location":{"id":"doi:10.1109/aiccsa.2009.5069434","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa.2009.5069434","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 IEEE/ACS International Conference on Computer Systems and Applications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029119690","display_name":"Ghassan Kbar","orcid":null},"institutions":[{"id":"https://openalex.org/I122640774","display_name":"American University in Dubai","ror":"https://ror.org/0540vvc38","country_code":"AE","type":"education","lineage":["https://openalex.org/I122640774"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Ghassan Kbar","raw_affiliation_strings":["American University, Dubai, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"American University, Dubai, UAE","institution_ids":["https://openalex.org/I122640774"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5029119690"],"corresponding_institution_ids":["https://openalex.org/I122640774"],"apc_list":null,"apc_paid":null,"fwci":0.237,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.53250579,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"15","issue":null,"first_page":"874","last_page":"879"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.965399980545044,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9455000162124634,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7151839733123779},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.6720690131187439},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.6334186792373657},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6312112212181091},{"id":"https://openalex.org/keywords/security-management","display_name":"Security management","score":0.6205140352249146},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5221024751663208},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5156837701797485},{"id":"https://openalex.org/keywords/threat","display_name":"Threat","score":0.5047029256820679},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.4969845116138458},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.4819507300853729},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4528220593929291},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4097306728363037},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.26290470361709595},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2603656053543091},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.22208893299102783},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.06650137901306152}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7151839733123779},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6720690131187439},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.6334186792373657},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6312112212181091},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.6205140352249146},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5221024751663208},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5156837701797485},{"id":"https://openalex.org/C17520342","wikidata":"https://www.wikidata.org/wiki/Q7797190","display_name":"Threat","level":5,"score":0.5047029256820679},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.4969845116138458},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.4819507300853729},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4528220593929291},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4097306728363037},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.26290470361709595},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2603656053543091},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.22208893299102783},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.06650137901306152},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aiccsa.2009.5069434","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa.2009.5069434","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 IEEE/ACS International Conference on Computer Systems and Applications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W1975284775","https://openalex.org/W2026491614","https://openalex.org/W2068631291","https://openalex.org/W2272988262","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W3041075136","https://openalex.org/W2285205992","https://openalex.org/W3006961029","https://openalex.org/W2480445825","https://openalex.org/W2153011985","https://openalex.org/W2483482908","https://openalex.org/W1964692067","https://openalex.org/W1941743136","https://openalex.org/W1519099324","https://openalex.org/W201042542"],"abstract_inverted_index":{"Network":[0,35],"security":[1,143],"management":[2,130],"plays":[3],"a":[4,39],"crucial":[5],"role":[6],"in":[7,134,140],"protecting":[8],"organization":[9,54],"assets":[10,55,93],"and":[11,23,33,56,119,124,163],"its":[12],"computer":[13],"infrastructure.":[14],"This":[15,148],"can":[16,114],"be":[17,74,85,115],"done":[18],"by":[19,167],"identifying":[20],"the":[21,29,53,60,63,67,89,142],"vulnerabilities":[22],"developing":[24],"effective":[25],"control":[26],"that":[27,42,97,155],"reduces":[28],"risk":[30,36,129,144,149],"of":[31,62,69,91,109,145,161],"attacks":[32,165],"failures.":[34],"assessment":[37,83],"is":[38,43,132,150],"subjective":[40],"process":[41,125],"linked":[44],"to":[45,87,117,137,158],"multiple":[46,153],"variables.":[47],"These":[48],"variables":[49,154],"are":[50,107,156],"associated":[51],"with":[52],"their":[57,146],"impact":[58],"on":[59,152],"health":[61],"organization.":[64,147],"To":[65],"preserve":[66],"value":[68,90],"these":[70,92],"assets,":[71],"they":[72],"must":[73,84],"protected":[75],"from":[76],"failure":[77,106],"or":[78],"attacks.":[79,101],"In":[80],"addition":[81],"vulnerability":[82],"undertaken":[86],"assess":[88],"for":[94],"possible":[95,108,164],"deficiency":[96],"would":[98],"cause":[99],"successful":[100],"The":[102],"main":[103],"factors":[104],"affecting":[105],"system":[110],"failure,":[111,162],"threats":[112],"which":[113],"related":[116,126,157],"internal":[118],"external":[120],"attacks,":[121],"environmental":[122],"threat,":[123],"threats.":[127,168],"A":[128],"methodology":[131],"described":[133],"this":[135],"paper":[136],"assist":[138],"managers":[139],"evaluating":[141],"based":[151],"vulnerabilities,":[159],"probability":[160],"caused":[166]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2014,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}