Skip to Main content Skip to Navigation
Conference papers

Identifying Information Security Risks in a Social Network Using Self-organising Maps

Abstract : Managing information security risks in an organisation is one of the most important tasks an organisation has. Unfortunately, due to the complexity of most organisational systems, identifying information security risks can be difficult. One way to identify possible risks in an organisation is to make use of Social Network Analysis (SNA). While they can be used to identify risks, the metrics calculated using SNA are often numerous and daunting to managers unfamiliar with SNA. Furthermore, as the data in this form tend to be uncomfortable to process, educating managers about risks in their organisation can be quite difficult. Also, as these metrics often require quantitative processing in order to be useful, SNA on its own is not always an attractive method to use to identify risks in an organisation. In this paper the use of self-organising maps to identify possible information security risks in an organisation is investigated. Risk data were obtained from an organisation that deals in risk management, which were used to build a social network. A number of metrics associated with risk were calculated from the network, and these metrics were used to cluster the various entities using a self-organising map. Certain entities that pose a possible information security risk were identified. The results suggest that it may be viable to use self-organising maps, in concord with SNA, to more easily identify risks in an organisation using visual methods.
Document type :
Conference papers
Complete list of metadata

Cited literature [26 references]  Display  Hide  Download

https://hal.inria.fr/hal-02365733
Contributor : Hal Ifip <>
Submitted on : Friday, November 15, 2019 - 2:55:58 PM
Last modification on : Friday, November 15, 2019 - 3:02:24 PM
Long-term archiving on: : Sunday, February 16, 2020 - 5:06:22 PM

File

 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2022-01-01

Please log in to resquest access to the document

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Rudi Serfontein, Hennie Kruger, Lynette Drevin. Identifying Information Security Risks in a Social Network Using Self-organising Maps. 12th IFIP World Conference on Information Security Education (WISE), Jun 2019, Lisbon, Portugal. pp.114-126, ⟨10.1007/978-3-030-23451-5_9⟩. ⟨hal-02365733⟩

Share

Metrics

Record views

114