SEARCH RESULTS
 
Showing 1-10 of 130 records
 
Expand article

The Secret Sauce is the Situation Models

2008-08-09 10:23:08 by Tim Bass in The Complex Event Processing Blog
 
...models (not thesystem integration). Unfortunately, by accident, Richard incorrectly attributes Opher Etzions first order situation model approximation to both Opher and I in this quote from Richards post, a simple situation model of complex events, in which events (including derived, composite and complex events) represent the situation...
 
 
 
 
 
Expand article

Models and Reductionism - Reducing Clouds Into Streams

2008-04-14 01:17:58 by Greg Reemler in The Complex Event Processing Blog
 
...models to simple ones isa valid technique for problem solving. Likewise, eliminating uncertainty and assuming causality is a way to reduce complexity CEP was envisioned todiscover causal relationships in complex, uncertain,cloudydataand the current state-of-the-art of software from the streaming SQL vendors do not have this capability, unless...
 
 
 
 
 
Expand article

Contrasting Privacy & Integrity Models

2008-04-02 13:19:29 by Adrian Lane in Information Centric Security
 
There was a comment on Rich Mogulls blog page after he posted Principles of Information Centric Security about existing models for security and integrity, and comments on novelty. I think that is worth delving into in a bit more detail
 
 
 
 
 
Expand article

Risk Management and Analysis Standards Update

2008-06-17 16:51:27 by Alex in RiskAnalys.is
 
...models to create meaning. This has the capacity to change everything - the way we audit, the way we talk to other lines of business, the way we gather metrics a Herculean effort, to be sure, but I think that The Open Group is one organization that can effect change because it is Open & Participatory - Unlike many organizations developing...
 
 
 
 
 
Expand article

Wakeup Call for Risk Management

2008-09-19 10:11:09 by Burton Group in Security and Risk Management Strategies Blog
 
...models used for risk management realistic? Earlier, I described the mortgage market of the past few years as a Ponzi scheme, where risk management models must have assumed prices would keep rising. Unlike the dotcom boom whose demise many predicted, very few in the industry foresaw the sharp declines to come in housing prices and sales...
 
 
 
 
 
Expand article

Is Risk-Based Security Really Possible?

2007-07-26 20:42:00 by Bryan in practical risk management
 
...models don't work. I'll come back to "why you should" and "how you can" another time, but for now I want to discuss why the quantitative approach doesn't work The classic textbook quantitative risk calculation is Annualized Loss Expectancy ALE = (Impact of the event in $$) * (Number of times in a year the event will happen So, you...
 
 
 
 
 
Expand article

Modelling Situations for Event Processing

2008-07-15 05:04:21 by Tim Bass in The Complex Event Processing Blog
 
...models of situations. This means that one way to develop CEP applications or designing CEP architectures is to define situations of interest and build models that define the situation After we have a working model of the situation we will generally have a hierarchical model of the situation composed of various components of the situation. For...
 
 
 
 
 
Expand article

"Walking" with the SDL - Part 3

2008-07-23 16:43:00 by sdl in The Security Development Lifecycle
 
...models and attack surface documents to verify specific attacks were addressed in the code Architects can use them to identify new areas of potential attack surface based on how new code is written or interacts with existing code Project leadership can reference threat models or attack surface documents to ensure the completed project meets...
 
 
 
 
 
Expand article

Security ROI

2008-09-02 06:05:53 by schneier in Schneier on Security
 
...models to demonstrate that a particular security investment pays off. And in response, vendors are providing ROI models that demonstrate how their particular security solution provides the best return on investment It's a good idea in theory , but it's mostly bunk in practice Before I get into the details, there's one point I have to make....
 
 
 
 
 
Expand article

The Trouble with Threat Modeling

2007-09-26 19:11:00 by sdl in The Security Development Lifecycle
 
...models. Theres a large trade-off associated with this choice. The benefit is that everyone thinks about security early. The cost is that we have to be very prescriptive in how we advise people to approach the problem. Some people are great at think like an