Identification of IT Incidents for Improved Risk Analysis by Using Machine Learning
(2015) Euromicro Conference on Software Engineering and Advanced Applications (SEAA), 2015- Abstract
- Today almost every system or service, e.g., water, power supply, transportation, etc. is dependent on IT systems, and failure of these systems have serious and negative effects on the society. IT incidents are critical for the society as they can stop the function of critical systems and services. Moreover, in a software engineering context risk analysis is an important activity for the development and operation of safe software-intensive systems. However, the increased complexity and size of software intensive systems put additional requirements on the effectiveness of the risk analysis process. Therefore, the risk analysis process needs to be improved and it is believed that by having an overview of already occurred IT incidents, the... (More)
- Today almost every system or service, e.g., water, power supply, transportation, etc. is dependent on IT systems, and failure of these systems have serious and negative effects on the society. IT incidents are critical for the society as they can stop the function of critical systems and services. Moreover, in a software engineering context risk analysis is an important activity for the development and operation of safe software-intensive systems. However, the increased complexity and size of software intensive systems put additional requirements on the effectiveness of the risk analysis process. Therefore, the risk analysis process needs to be improved and it is believed that by having an overview of already occurred IT incidents, the risk analysis process can be improved. The saved information about IT incidents can be used as an input to risk analysis, which can help to correctly estimate the consequences of potential risks. This study investigates how difficult is it to find relevant risks from the available sources and the effort required to set up such a system. It also investigates how accurate are the found risks. It presents a prototype solution of a system that automatically identifies information pertaining
to IT incidents, from texts available online on Internet news sources, that have happened. This way IT incidents can be saved semi-automatically in a database and the saved information can be used later as an input to risk analysis. In this study 58% of texts that potentially can contain information about IT incidents were correctly identified from an experiment dataset by using the presented method. It is concluded that the identifying texts about IT incidents with automated methods like the one presented in this study is possible, but it requires some effort to set up. (Less)
Please use this url to cite or link to this publication:
https://lup.lub.lu.se/record/5366593
- author
- Sulaman, Sardar Muhammad LU ; Weyns, Kim LU and Höst, Martin LU
- organization
- publishing date
- 2015
- type
- Contribution to conference
- publication status
- published
- subject
- keywords
- IT-incident, risk analysis, machine learning, text classification
- conference name
- Euromicro Conference on Software Engineering and Advanced Applications (SEAA), 2015
- conference location
- Funchal, Madeira, Portugal
- conference dates
- 2015-08-26 - 2015-08-28
- external identifiers
-
- scopus:84958248336
- language
- English
- LU publication?
- yes
- id
- b0eba441-cf90-4f4a-8055-8379f3e38754 (old id 5366593)
- date added to LUP
- 2016-04-04 14:20:26
- date last changed
- 2022-05-02 01:32:53
@misc{b0eba441-cf90-4f4a-8055-8379f3e38754,
abstract = {{Today almost every system or service, e.g., water, power supply, transportation, etc. is dependent on IT systems, and failure of these systems have serious and negative effects on the society. IT incidents are critical for the society as they can stop the function of critical systems and services. Moreover, in a software engineering context risk analysis is an important activity for the development and operation of safe software-intensive systems. However, the increased complexity and size of software intensive systems put additional requirements on the effectiveness of the risk analysis process. Therefore, the risk analysis process needs to be improved and it is believed that by having an overview of already occurred IT incidents, the risk analysis process can be improved. The saved information about IT incidents can be used as an input to risk analysis, which can help to correctly estimate the consequences of potential risks. This study investigates how difficult is it to find relevant risks from the available sources and the effort required to set up such a system. It also investigates how accurate are the found risks. It presents a prototype solution of a system that automatically identifies information pertaining<br/><br>
to IT incidents, from texts available online on Internet news sources, that have happened. This way IT incidents can be saved semi-automatically in a database and the saved information can be used later as an input to risk analysis. In this study 58% of texts that potentially can contain information about IT incidents were correctly identified from an experiment dataset by using the presented method. It is concluded that the identifying texts about IT incidents with automated methods like the one presented in this study is possible, but it requires some effort to set up.}},
author = {{Sulaman, Sardar Muhammad and Weyns, Kim and Höst, Martin}},
keywords = {{IT-incident; risk analysis; machine learning; text classification}},
language = {{eng}},
title = {{Identification of IT Incidents for Improved Risk Analysis by Using Machine Learning}},
year = {{2015}},
}