Title
Managing security risks for inter-organisational information systems: a multiagent collaborative model
Abstract
AbstractInformation sharing across organisations is critical to effectively managing the security risks of inter-organisational information systems. Nevertheless, few previous studies on information systems security have focused on inter-organisational information sharing, and none have studied the sharing of inferred beliefs versus factual observations. In this article, a multiagent collaborative model MACM is proposed as a practical solution to assess the risk level of each allied organisation’s information system and support proactive security treatment by sharing beliefs on event probabilities as well as factual observations. In MACM, for each allied organisation’s information system, we design four types of agents: inspection agent, analysis agent, control agent, and communication agent. By sharing soft findings beliefs in addition to hard findings factual observations among the organisations, each organisation’s analysis agent is capable of dynamically predicting its security risk level using a Bayesian network. A real-world implementation illustrates how our model can be used to manage security risks in distributed information systems and that sharing soft findings leads to lower expected loss from security risks.
Year
DOI
Venue
2016
10.1080/17517575.2014.986217
Periodicals
Keywords
DocType
Volume
enterprise information systems (EIS),information systems security,information sharing,multiagent,Bayesian networks
Journal
10
Issue
ISSN
Citations 
7
1751-7575
4
PageRank 
References 
Authors
0.40
33
6
Name
Order
Citations
PageRank
Nan Feng173.49
Harris Wu2553.94
Minqiang Li341837.16
Desheng Wu470.77
Fuzan Chen510910.84
Jin Tian6945.54