How IT Infrastructures Break: Better Modeling for Better Risk Management - Archive ouverte HAL Access content directly
Conference Papers Year :

How IT Infrastructures Break: Better Modeling for Better Risk Management


IT infrastructures break. Whether it be computer attacks or software, human or hardware failures, IT safety and security risk is present in many technical and organizational domains. Risk management is therefore essential to ensure infrastructure resilience, compliance with legal and contractual requirements and a better knowledge of what causes what. But risk management is hard to automate, sometimes because criteria are subject to human appreciation, sometimes because of an incomplete or wrong knowledge of the infrastructure itself. And this latter factor has become more evident with the advent of modern cloudnative architectures: complex and dynamic infrastructures make risk assessment difficult. In this article, we propose an approach based on infrastructure modeling to help automate the risk assessment process for IT infrastructures. Instead of focusing first on hazard analysis, our approach attempts to consider (most of) such an analysis as a consequence of infrastructure modeling. By deciding to focus on the infrastructure modeling itself and by involving as many of the company's stakeholders as possible in the process, we intend to make risk assessment more collaborative and thorough, by taking advantage of everyone's expertise.
Fichier principal
Vignette du fichier
crisis2022-camera_ready.pdf (361.62 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03801086 , version 1 (06-10-2022)


  • HAL Id : hal-03801086 , version 1


Benjamin Somers, Fabien Dagnat, Jean-Christophe Bach. How IT Infrastructures Break: Better Modeling for Better Risk Management. 17th International Conference on Risks and Security of Internet and Systems ( CRiSIS 2022 )), Dec 2022, Sousse, Tunisia. ⟨hal-03801086⟩
45 View
18 Download


Gmail Facebook Twitter LinkedIn More