Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

17   Cybersecurity Risk Assessment

Overview

•   17.1 A Case for Quantitative Risk Assessment

•   17.2 Risk as a Primary Metric

•   17.3 Why Measure?

•   17.3.1 Characterize

•   17.3.2 Evaluate

•   17.3.3 Predict

•   17.3.4 Improve

•   17.4 Evaluate Defenses from an Attacker’s Value Perspective

•   17.5 The Role of Risk Assessment and Metrics in Design

•   17.6 Risk Assessment Analysis Elements

•   17.6.1 Develop Mission Model

•   17.6.2 Develop System Model

•   17.6.3 Develop Adversary Models

•   17.6.4 Choose Representative Strategic Attack Goals

•   17.6.5 Estimate Harm Using Wisdom of Crowds

•   17.6.6 Estimate Probability Using Wisdom of Crowds

•   17.6.7 Choose Representative Subset

•   17.6.8 Develop Deep Attack Trees

•   17.6.9 ...