Risk Analysis for Electronic Commerce Using Case-Based Reasoning

다국어 초록 (Multilingual Abstract)

Electronic Commerce (EC) is expected to be essential for an organization's survival and growth in the future. Then the security of the EC system that ensures authorized and correct transaction processing becomes one of the most critical issues in implementing the system.
The analysis of risk that a system faces is the core part of security management since risk analysis can identify the principal assets, the threats and the vulnerabilities of those assets, and the risks confronting the assets. This study develops a system for risk analysis under EC environment using case-based reasoning (CBR) technique.
The process of the proposed system is composed of 4 steps: initial data collection, asset evaluation, threat and vulnerability evaluation, and result generation of risk analysis. This process follows the traditional risk analysis process. This system employs the casebase of past analyses and past accidents. Although some studies introduced several case-based systems for risk analysis of traditional information system, none of them is under EC environment. The proposed system is the first to apply the CBR technique for risk analysis of EC system.

목차 (Table of Contents)

• Abstract
• 1. Introduction
• 2. Risk analysis of EC
• 2.1 Risk analysis
• 2.2 Risk analysis in EC
• 3. Case-based reasoning(CBR)
• 3.1 Basic concepts of CBR
• 3.2 CBR approach in risk analysis
• 4. System architecture
• 4.1 Process of the system
• 4.2 Case Representation
• 4.3 Case Indexing
• 4.4 Identifying Similar Cases
• 5. Implementation of the system
• 5.1 Initial Data Collection
• 5.2 Asset Evaluation
• 5.3 Threat and Vulnerability Evaluation
• 5.4 Generation of Risk Analysis Result
• 6. Conclusion
• Reference