Research about Information Security Risk Assessment of Oil and Gas Production Management System

Abstract:

Current information security risk assessment models usually focus on the security problems of information system and its environment, however they ignore data changes and the accompanying risks in the whole production process. Aiming at the problems above, the paper analyzes the risks of oil and gas production management system during the different stages of data generation, transmission, processing, storage and demonstration, then proposes a set of data risk assessment model and method focusing on data security. The data risk assessment model provides a new way to prevent intrusion, protect data and safeguard information system’s integrity, availability and security.

• Periodical: Advanced Materials Research (Volumes 631-632)
• Pages: 1390-1396
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.631-632.1390
• Online since: January 2013
• Authors: Jun Jun Sun, Bei Zhang, Mei Feng, Liang Chen, Mei Feng Hou
• Keywords: Assessment Model, Data Assets, Risk Assessment, Software Weakness

References

[1] Chen Xiuzhen , Zheng Qinghua , Guan Xiaohong , et. Al. Study on Evaluation for Security Situation of Networked Systems[J ] . J ournal of Xi'an J iaotong Universi t y , 2004 , 38 (4) : 404-408 (Ch).

[2] Feng Dengguo , Zhang Yang , Zhang Yuqing. Survey of Information Security Risk Assessment [J ]. J ournal of China Institute of Communications , 2004 , 25 (7) : 10-18 (Ch).

[3] Aagedal J O, Den Braber F, et al. Model-based Risk Assessment to Improve Enterprise Security[ C] . Proceedings of the 6th International, Enterprise Distributed Object Computing Conference, EDOC'02, 2002 . 51 -62.

DOI: 10.1109/edoc.2002.1137696

[4] National Institute of Standards and Technology. Special Publications 800-30, Risk Management Guide (DRAFT). June (2008).

[5] Gary McGraw. Managing Software Security Risks[ J] . IEEE Computer, 2002, 35( 4) : 99-101.

[6] Gary McGraw. Software Security[ J] . Security & Privacy Magazine, IEEE, 2004, 2 ( 2) : 80 - 83.

[7] Hu Yong, Fang Yong, Xiao Long. Research about engineering method of information system risk analysis, 2006, 32(13): 29-31.

[8] BUTLER S A, FISCHBECK P. Multi-Attribute Risk Assessment, Technical Report CMD-CS-01-169. December (2005).

[9] BUTLER S A. Security Attribute Evaluation Method: A Cost-Benefit Approach. Computer Science. Department, (2008).

[10] Martel S. A New Model for Computer Network Security Risk Analysis[D]. Ottawa, Ontario: Department of Systems and Computer Engineering, Carleton University, (2002).

[11] Pfleeger C P. Creating and Implementing a Security Strategy[J]. Cutter Consortium, 2001, 4(3).