Principles for Better Information Security through More Accurate, Transparent Risk Scoring
In: Journal of homeland security and emergency management, Band 7, Heft 1
ISSN: 1547-7355
73 Ergebnisse
Sortierung:
In: Journal of homeland security and emergency management, Band 7, Heft 1
ISSN: 1547-7355
In: Military Operations Research, Band 11, Heft 3, S. 49-61
In: Military Operations Research, Band 6, Heft 2, S. 23-33
In: Risk analysis: an international journal, Band 20, Heft 1, S. 125-134
ISSN: 1539-6924
Earlier work with decision trees identified nonseparability as an obstacle to minimizing the conditional expected value, a measure of the risk of extreme events, by the well‐known method of averaging out and folding back. This second of two companion papers addresses the conditional expected value that is defined as the expected outcome assuming that a random variable is observed only in the upper 100 (1 −α) percent of potential outcomes, where α is a cumulative probability preselected by the decision maker. An approach is proposed to overcome the need to evaluate all policies in order to identify the optimal policy. The approach is based in part on approximating the conditional expected value by using statistics of extremes. An existing convenient approximation of the conditional expected value is shown to be separable into two constituent elements of risk and can thus be optimized, along with other objectives including the unconditional expected value of the outcome, in a multiobjective decision tree. An example of sequential decision making for remediation or environmental contamination is provided. The importance of the results for risk analyis beyond the minimization of conditional expected values is pointed out.
In: Risk analysis: an international journal, Band 18, Heft 4, S. 497-510
ISSN: 1539-6924
The concept of the return period is widely used in the analysis of the risk of extreme events and in engineering design. For example, a levee can be designed to protect against the 100‐year flood, the flood which on average occurs once in 100 years. Use of the return period typically assumes that the probability of occurrence of an extreme event in the current or any future year is the same. However, there is evidence that potential climate change may affect the probabilities of some extreme events such as floods and droughts. In turn, this would affect the level of protection provided by the current infrastructure. For an engineering project, the risk of an extreme event in a future year could greatly exceed the average annual risk over the design life of the project. An equivalent definition of the return period under stationary conditions is the expected waiting time before failure. This paper examines how this definition can be adapted to nonstationary conditions. Designers of flood control projects should be aware that alternative definitions of the return period imply different risk under nonstationary conditions. The statistics of extremes and extreme value distributions are useful to examine extreme event risk. This paper uses a Gumbel Type I distribution to model the probability of failure under nonstationary conditions. The probability of an extreme event under nonstationary conditions depends on the rate of change of the parameters of the underlying distribution.
In: Risk analysis: an international journal, Band 32, Heft 1, S. 3-6
ISSN: 1539-6924
In: Military Operations Research, Band 7, Heft 1, S. 19-38
In: Risk analysis: an international journal, Band 3, Heft 2, S. 125-128
ISSN: 1539-6924
In: Risk analysis: an international journal, Band 19, Heft 1, S. 83-94
ISSN: 1539-6924
In this paper, we review methods for assessing and managing the risk of extreme events, where "extreme events" are defined to be rare, severe, and outside the normal range of experience of the system in question. First, we discuss several systematic approaches for identifying possible extreme events. We then discuss some issues related to risk assessment of extreme events, including what type of output is needed (e.g., a single probability vs. a probability distribution), and alternatives to the probabilistic approach. Next, we present a number of probabilistic methods. These include : guidelines for eliciting informative probability distributions from experts; maximum entropy distributions; extreme value theory; other approaches for constructing prior distributions (such as reference or noninformative priors); the use of modeling and decomposition to estimate the probability (or distribution) of interest; and bounding methods. Finally, we briefly discuss several approaches for managing the risk of extreme events, and conclude with recommendations and directions for future research.
In: Risk analysis: an international journal, Band 14, Heft 5, S. 731-742
ISSN: 1539-6924
Use of probability distributions by regulatory agencies often focuses on the extreme events and scenarios that correspond to the tail of probability distributions. This paper makes the case that assessment of the tail of the distribution can and often should be performed separately from assessment of the central values. Factors to consider when developing distributions that account for tail behavior include (a) the availability of data, (b) characteristics of the tail of the distribution, and (c) the value of additional information in assessment. The integration of these elements will improve the modeling of extreme events by the tail of distributions, thereby providing policy makers with critical information on the risk of extreme events. Two examples provide insight into the theme of the paper. The first demonstrates the need for a parallel analysis that separates the extreme events from the central values. The second shows a link between the selection of the tail distribution and a decision criterion. In addition, the phenomenon of breaking records in time‐series data gives insight to the information that characterizes extreme values. One methodology for treating risk of extreme events explicitly adopts the conditional expected value as a measure of risk. Theoretical results concerning this measure are given to clarify some of the concepts of the risk of extreme events.