TELSAFE: Security Gap Quantitative Risk Assessment Framework
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866908441686048768 |
|---|---|
| author | Siddiqui, Sarah Ali Thapa, Chandra Wang, Derui Holland, Rayne Shao, Wei Camtepe, Seyit Suzuki, Hajime Shah, Rajiv |
| author_facet | Siddiqui, Sarah Ali Thapa, Chandra Wang, Derui Holland, Rayne Shao, Wei Camtepe, Seyit Suzuki, Hajime Shah, Rajiv |
| contents | Gaps between established security standards and their practical implementation have the potential to introduce vulnerabilities, possibly exposing them to security risks. To effectively address and mitigate these security and compliance challenges, security risk management strategies are essential. However, it must adhere to well-established strategies and industry standards to ensure consistency, reliability, and compatibility both within and across organizations. In this paper, we introduce a new hybrid risk assessment framework called TELSAFE, which employs probabilistic modeling for quantitative risk assessment and eliminates the influence of expert opinion bias. The framework encompasses both qualitative and quantitative assessment phases, facilitating effective risk management strategies tailored to the unique requirements of organizations. A specific use case utilizing Common Vulnerabilities and Exposures (CVE)-related data demonstrates the framework's applicability and implementation in real-world scenarios, such as in the telecommunications industry. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2507_06497 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | TELSAFE: Security Gap Quantitative Risk Assessment Framework Siddiqui, Sarah Ali Thapa, Chandra Wang, Derui Holland, Rayne Shao, Wei Camtepe, Seyit Suzuki, Hajime Shah, Rajiv Cryptography and Security Software Engineering Gaps between established security standards and their practical implementation have the potential to introduce vulnerabilities, possibly exposing them to security risks. To effectively address and mitigate these security and compliance challenges, security risk management strategies are essential. However, it must adhere to well-established strategies and industry standards to ensure consistency, reliability, and compatibility both within and across organizations. In this paper, we introduce a new hybrid risk assessment framework called TELSAFE, which employs probabilistic modeling for quantitative risk assessment and eliminates the influence of expert opinion bias. The framework encompasses both qualitative and quantitative assessment phases, facilitating effective risk management strategies tailored to the unique requirements of organizations. A specific use case utilizing Common Vulnerabilities and Exposures (CVE)-related data demonstrates the framework's applicability and implementation in real-world scenarios, such as in the telecommunications industry. |
| title | TELSAFE: Security Gap Quantitative Risk Assessment Framework |
| topic | Cryptography and Security Software Engineering |
| url | https://arxiv.org/abs/2507.06497 |