Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

18   Risk Mitigation and Optimization

Overview

•   18.1 Develop Candidate Mitigation Packages

•   18.2 Assess Cost of Mitigation Packages

•   18.2.1 Direct Cost

•   18.2.2 Mission Impact

•   18.3 Re-estimate Leaf Node Probabilities and Compute Root Node Probability

•   18.4 Optimize at Various Practical Budget Levels

•   18.4.1 Knapsack Algorithm

•   18.4.2 Sensitivity Analysis

•   18.5 Decide Investment

•   18.6 Execute

Learning Objectives

•   List and describe the risk mitigation elements in the risk assessment process and discuss how they relate to risk assessment analysis elements.

•   Explain how risk mitigation packages are formulated and how they are used in the process.

•   Define, compare, and contrast attack direct cost and ...