dc.contributor.author | Ma, Shenglan | |
dc.contributor.author | Wang, Hao | |
dc.contributor.author | Dai, Hong-Ning | |
dc.contributor.author | Cheng, Shuhan | |
dc.contributor.author | Yi, Ruihua | |
dc.contributor.author | Wang, Tongsen | |
dc.date.accessioned | 2019-04-16T06:18:45Z | |
dc.date.available | 2019-04-16T06:18:45Z | |
dc.date.created | 2019-01-17T19:11:17Z | |
dc.date.issued | 2018 | |
dc.identifier.citation | 2018 IEEE 16th Intl Conf on Dependable, Autonomic and Secure Computing, 16th Intl Conf on Pervasive Intelligence and Computing, 4th Intl Conf on Big Data Intelligence and Computing and Cyber Science and Technology Congress(DASC/PiCom/DataCom/CyberSciTech) | nb_NO |
dc.identifier.isbn | 978-1-5386-7519-9 | |
dc.identifier.uri | http://hdl.handle.net/11250/2594709 | |
dc.description.abstract | Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework. | nb_NO |
dc.language.iso | eng | nb_NO |
dc.publisher | IEEE | nb_NO |
dc.relation.ispartof | 2018 IEEE 16th Intl Conf on Dependable, Autonomic and Secure Computing, 16th Intl Conf on Pervasive Intelligence and Computing, 4th Intl Conf on Big Data Intelligence and Computing and Cyber Science and Technology Congress(DASC/PiCom/DataCom/CyberSciTech) | |
dc.title | A Blockchain-Based Risk and Information System Control Framework | nb_NO |
dc.type | Chapter | nb_NO |
dc.description.version | acceptedVersion | nb_NO |
dc.source.pagenumber | 106-113 | nb_NO |
dc.identifier.doi | 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031 | |
dc.identifier.cristin | 1659763 | |
dc.description.localcode | © 2018 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works | nb_NO |
cristin.unitcode | 194,63,55,0 | |
cristin.unitname | Institutt for IKT og realfag | |
cristin.ispublished | true | |
cristin.fulltext | Accepted | |
cristin.qualitycode | 1 | |