Identity Analytics: Using Modeling and Simulation to Improve Data Security Decision Making
Casassa Mont, Marco; Baldwin, Adrian; Griffin, Jonathan; Shiu, Simon; Yolanta Beres
Keyword(s): Identity Analytics, Identity Management, Security, Security Analytics, Risk Assessment, Modelling Simulation, Economics, Trade-offs, Policies, Threats, Data Protection
Abstract: This short paper describes research in the space of Identity Analytics that is helping decision makers (e.g. CIOs/CISOs) reason about choices of identity controls. We present an approach of using modeling and simulation to explore the effects of different identity controls on security and business outcomes. More specifically we present a case study on "collaborative data sharing" showing how the methodology can be applied to understand the trade- offs around centralizing identity management and educating users. This case study shows how simulation and modeling enhance decision making around identity management, along with its impact on data security.
Additional Publication Information: Submitted to Financial Cryptography and Data Security 2009, February 23-26, 2009, Barbados Date Issued: No date available.
External Posting Date: November 6, 2008 [Fulltext]. Approved for External Publication
Internal Posting Date: November 6, 2008 [Fulltext]