Chen-Chi Shing

A Security Risk Model Using Game Theory

This paper uses game theory to model the strategies against the threats based on the cost.If the frequencies of threats occurrence are known, the optimal pure strategy can be found by expected effectiveness. However, if those frequencies are unknown, the optimal strategy is a mixed strategy provided by game theory. The problem can also be solved by linear programming method.

Information Security Risk Assessment Using Markov Models

Risk assessment is important in assessing the security states in information security. This paper proposed to use Markov models to assess the risk of information security. The simulation results were shown using different distributions.

Validating a Two Category Secured Access Database Model

Unauthorized attempts to access database and data warehouse in a data mining system are unavoidable. The privileged group and the public group are involved in a secured data mining system. The privileged group may take four different actions and the public group who has only two different “read” privileges. In this paper this two category secured access database model by semi-Markov chains is discussed. It shows how to validate this simplified two category secured access database model.

Confidentiality Simulation in a Simplified Database Model

In an e-commerce environment, databases are accesses constantly. This paper looks into the confidentiality issues involved in a simplified database access. In a simplified secured database access model, there are two groups involved: privileged group and public group which they can access data with any distribution. In order to secure the confidentiality policy of the database, this paper shows how to simulate an Erlang distribution which is used in a proposed semi-Markov chains.