Implementation and Comparison of Machine Learning Classifiers for Information Security Risk Analysis of a Human Resources Department

Abstract

The aim of this study is threefold. First, a qualitative information security risk survey is implemented in human resources department of a logistics company. Second, a machine learning risk classification and prediction model with proper data set is established from the results obtained in this survey. Third, several classifier algorithms are tested where their training and test performances are compared using error rates, ROC curves, Kappa statistics and F-measures. The results show that some classifier algorithms can be used to estimate specific human based information security risks within acceptable error rates.