Software Quality Assurance

191risk, vulnerability, and threat ManageMent

• Examine different threat perspectives.

• Evaluate how different operational modes and states and

time affect risk.

• Optimize the use of threat control measures by identify-

ing common lower-level events within transaction paths.

•

T

ransaction paths capture the most logical sequence of events

that could cause an event to occur. ey focus on what is logi-

cally possible, not whether it is feasible, economical, or probable.

•

A

n individual path represents a unique route from the top to

bottom event.

• Paths can be developed as part of the analysis or be used to

reconstruct how an accident/incident occurred.

•

F

irst define the boundaries of the system.

Evaluate Transaction Paths

• e transaction paths “