Risk assessment using big data analytics approach: a review

Abstract

Information security administrator deal with challenging task of assessing the information security risks. There are lack of complete information about the vulnerabilities in the system that leads to the problem of information ambiguity. This leads to difficulty in assessing the severity of vulnerabilities and estimation of the impact of an attack. Most of the assessment in university is a qualitative analysis, lack of quantitative, systematic and standardized risk analysis. University management system only focus on network security rather than information security. There are lack of standard framework for information security assessment in University Information System (UIS). It is important to conduct risk assessment to help in making a decision to manage UIS. In the large university campus network, there is a need to improve risk position and security countermeasure. Big data analytics approach is being implemented in this study through real world case study in University Information System (UIS) at selected government supported university in Malaysia. The expected contribution of this study is to improve risk assessment decision making and security measures in University Information System (UIS).