Finding and Fixing Vulnerabilities in Information Systems: The Vulnerability Assessment and Mitigation Methodology - Softcover

Philip S. Anton; Robert H. Anderson; Richard Mesic; Michael Scheiern

Softcover

ISBN 10: 0833034340 ISBN 13: 9780833034342

Publisher: RAND Corporation, 2004

Synopsis

Understanding an organization's reliance on information systems and how to mitigate the vulnerabilities of these systems can be an intimidating challenge--especially when considering less well-known weaknesses or even unknown vulnerabilities that have not yet been exploited. The authors introduce the Vulnerability Assessment and Mitigation methodology, a six-step process that uses a top-down approach to protect against future threats and system failures while mitigating current and past threats and weaknesses.

About this title

About the Author

Philip S. Anton (Ph.D., Information and Computer Science, University of California at Irvine) is a senior information and computer scientist at RAND.

Robert H. Anderson (Ph.D., Applied Mathematics, Harvard University) is a Senior Information Scientist at RAND. Research areas include social implications of the information revolution; security and safety of internetted networks; computer languages and support environments for modeling and simulation.

Richard Mesic (M.S., D.A.G.S., Probability and Statistics, Michigan State University) is a RAND senior staff member, Defense Planning and Analysis Department.

From the Back Cover

Introduces the Vulnerability Assessment and Mitigation methodology, which guides its users through a comprehensive review of vulnerabilities across all aspects of information systems and identifies relevant mitigation techniques.

Edition details

• Publisher: RAND Corporation
• Publication date: 2004
• Language: English
• ISBN 10: 0833034340
• ISBN 13: 9780833034342
• Binding: Paperback
• Number of pages: 143