Integrating Shared Cyber Security Information into Information Security Risk Management

In the last couples of years, the complexity and interconnectedness of Information Systems (IS), and security related incidents increased significantly. In order to guarantee confidentiality, integrity, and availability of these IS an appropriate information security risk management (ISRM) must be in place. Reliable ISRM represents a challenge for organizations, since they take security related decisions based on outdated data, overlook vulnerabilities, threats or common incidents. To overcome these issues the acquisition of shared cyber security information at the right time supports ISRM to reduce risks, identify attacks, and enhance resilience of an IS. However, the exchange and acquisition of shared cyber security information represents a major challenge in ISRM. In the proposed PhD thesis we focus on this challenge by developing a framework that automatically combines and integrates shared cyber security information into ISRM processes. In doing so, we develop quality criteria, measures, and metrics to evaluate and filter shared cyber security information.