An Intelligent System to Assessing Information Systems Security Risks in Electronic Business

Abstract

In electronic business environment, it is critical for an enterprise to assess information systems security risks. In this paper, an intelligent system for information systems security risk assessment is proposed. In order to identify the security risks in an enterprise, the proposed system utilizes genetic algorithm to search the rules of risk identification based on historical data. According to the results of risk identification, a BN is developed to predict security risks, identify sources of risks, and take proper measure to reduce risk occurrence probability in the information systems. Finally, the system is further demonstrated and validated via a case study.