Bitte verwenden Sie diesen Link, um diese Publikation zu zitieren, oder auf sie als Internetquelle zu verweisen: https://hdl.handle.net/10419/330634 
Erscheinungsjahr: 
2024
Quellenangabe: 
[Journal:] Business & Information Systems Engineering [ISSN:] 1867-0202 [Volume:] 67 [Issue:] 4 [Publisher:] Springer Fachmedien Wiesbaden GmbH [Place:] Wiesbaden [Year:] 2024 [Pages:] 511-530
Verlag: 
Springer Fachmedien Wiesbaden GmbH, Wiesbaden
Zusammenfassung: 
The increased reliance of organizations on information technology inherently increases their vulnerability to cyber-security attacks. As a response, a host of cyber-security approaches exists. While useful, these approaches exhibit shortcomings such as an inclination to be fragmented, not accounting for up-to-date organizational data, focusing on singular vulnerabilities only, and being reactive, i.e., focusing on patching up vulnerabilities in current systems. The paper presents and evaluates a modeling method aiming to address those shortcomings and to support security by design with a focus on the electricity sector. The proposed modeling method encompasses a multi-level reference model reconstructing and integrating existing initiatives and supporting top-down and bottom-up analyses. Compared to earlier work, the paper contributes (1) a process model for cyber-security by design, which proactively considers security as a first-class citizen during the design process, (2) a complete coverage of the multi-level model, in terms of three views complementing the introduced process model, (3) an elaborated evaluation, in terms of reporting on an additional design science cycle.
Schlagwörter: 
Cyber-security by design
Modeling method
Security reference framework
Security analysis
Multi-level modeling
Persistent Identifier der Erstveröffentlichung: 
Creative-Commons-Lizenz: 
cc-by Logo
Dokumentart: 
Article
Dokumentversion: 
Published Version

Datei(en):
Datei
Größe





Publikationen in EconStor sind urheberrechtlich geschützt.