A Hybrid Risk Assessment Technique for Data Centers

A Hybrid Risk Assessment Technique for Data Centers

연구 분야: Safety

학회: World Congress in Computer Science, Computer Engineering & Applied Computing

For security operations to extensively cover all vulnerabilities when deploying countermeasures, risk assessment tools are necessary to supplement Security Information and Event Management (SIEM) tools and Endpoint detection and response (EDR) technology. Our research focuses on understanding the risk assessment methods and techniques that are used to evaluate systems unavailability in Data Centers (DC) which will improve software product development process. It seeks to develop the Event Tree (ET) and Fault Tree (FT), compare the strengths and weaknesses of each, discuss potential countermeasures against system unavailability related risks in a Data Center and synergize the two techniques to build a heuristic hybrid bow and tie framework. The paper will conclude by culminating the opportunities of a hybrid integrated solution to evaluate risks related to the Data Center. A Risk Assessment Survey (RAS) is developed to augment and improve the efficacy of the proposed hybrid risk assessment framework. The results show that the hybrid framework developed was effective in assessing risks that may occur as a result of system unavailability in the Data Center which indicates that the framework developed is efficient, robust and scalable.