Model-based security analysis in seven steps — a guided tour to the CORAS method

Autor: Mass Soldal Lund, Folker den Braber, Fredrik Vraalsen, Ketil Stølen, I. Hogganvik
Rok vydání: 2007
Předmět:
Zdroj: BT Technology Journal. 25:101-117
ISSN: 1573-1995
1358-3948
Popis: This paper presents the CORAS method for model-based security analysis. The presentation is case-driven. We follow two analysts in their interaction with an organisation by which they have been hired to carry out a security risk analysis. The analysis is divided into seven main steps, and the paper devotes a separate section to each of them. The paper focuses in particular on the use of the CORAS security risk modelling language as a means for communication and interaction during the seven steps.
Databáze: OpenAIRE