Dynamic risk evaluation model as a security field

Abstract

Generally, high security information management leads to high confidentiality. However, high confidentiality causes low availability. Therefore, we think availability can be increased by choosing the appropriate security level depending on the changing risk. Thus, this paper proposes a risk evaluation model in which risk is quantitatively evaluated using the value of information, protection level, and threat level.