Mouna Jouini

TL;DR: A hybrid model for information system security threat classification is defined in order to propose a classification architecture that supports all threat classification principles and helps organizations implement their information security strategies.

TL;DR: The authors propose a generic framework that analysis and evaluate cloud security problems and then propose appropriate countermeasures to solve these problems using a quantitative security risk assessment model named Multi-dimensional Mean Failure Cost (M2FC).

TL;DR: A user-centered measure of cyber-security is explored, and it is seen how this measure can be used to analyze cloud computing as a business model.

TL;DR: The proposed cloud computing architecture would be available to individuals and organizations, large and small, and operate on the same pattern as other public utilities, namely: • Subscribers sign up for service from a service provider, on a contractual basis, and the service provider delivers services of data processing, data access and data storage to subscribers.

TL;DR: A new threat identification approach is proposed on which to build a quantitative security risk model for information systems that is systematic, extendable, and modular to help managers accurately assess security threat in an incremental and comprehensive way.