Til hovedinnhold
Norsk English

Security risk analysis of system changes exemplified within the oil and gas domain

Sammendrag

Changes, such as the introduction of new technology, may have considerable impact on the risk to which a system or organization is exposed. For example, in the oil & gas domain, introduction of technology that allows offshore installations to be operated from onshore means that fewer people are exposed to risk on the installation, but it also introduces new risks and vulnerabilities. We need suitable methods and techniques in order to understand how a change will affect the risk picture. This paper presents an approach that offers specialized support for analysis of risk with respect to change. The approach allows links between elements of the target of analyses and the related parts of the risk model to be explicitly captured, which facilitates tool support for identifying the parts of a risk model that need to be reconsidered when a change is made to the target. Moreover, the approach offers language constructs for capturing the risk picture before and after a change. The approach is demonstrated on a case concerning new software technology to support decision making on petroleum installations.
Les publikasjonen

Kategori

Vitenskapelig artikkel

Oppdragsgiver

  • EC/FP7 / 333053
  • Research Council of Norway (RCN) / 217213
  • EC/FP7 / 256980
  • Research Council of Norway (RCN) / 232059

Språk

Engelsk

Forfatter(e)

  • Atle Refsdal
  • Bjørnar Solhaug
  • Ketil Stølen

Institusjon(er)

  • SINTEF Digital / Sustainable Communication Technologies
  • Universitetet i Oslo

År

2015

Publisert i

International Journal on Software Tools for Technology Transfer (STTT)

ISSN

1433-2779

Årgang

17

Hefte nr.

3

Side(r)

251 - 266

Vis denne publikasjonen hos Cristin