A Method of Simplifying the Asset Dependency Cycle in Security Risk Analysis

Abstract

In recent years, one obstacle to information security risk analysis is the complexity of asset dependency. Developing research tends to produce models with great complexity and some that do not involve dependency cycles, make the model difficult to implement. This research developed the idea of compound nodes to produce a modular risk analysis that simplify the asset dependency cycle. This study uses the following assumptions: aimed at quantitative assessments, values based on likelihood, and based on graph basic models. The stages of the method consist of identification of cyclic in the initial model, reconstructing cyclic graph into acyclic graph, and reconstruction of cyclic sub graph into acyclic sub graph. Through an illustrative example, this research produces a method that helps facilitate understanding the complexity of asset dependencies in risk analysis.