Identity Analytics: Using Modeling and Simulation to Improve Data Security

Casassa Mont, Marco ; Baldwin, Adrian ; Griffin, Jonathan ; Shiu, Simon ; Yolanta Beres

HP Development Company

关键词: Identity Analytics;    Identity Management;    Security;    Security Analytics;    Risk Assessment;    Modelling Simulation;    Economics;    Trade-offs;    Policies;    Threats;    Data Protection;   

RP-ID  :  HPL-2008-188

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

This short paper describes research in the space of Identity Analytics that is helping decision makers (e.g. CIOs/CISOs) reason about choices of identity controls. We present an approach of using modeling and simulation to explore the effects of different identity controls on security and business outcomes. More specifically we present a case study on "collaborative data sharing" showing how the methodology can be applied to understand the trade- offs around centralizing identity management and educating users. This case study shows how simulation and modeling enhance decision making around identity management, along with its impact on data security.