Risk-based assessment of the surety of information systems
Sandia National Labs., Albuquerque, NM (United States), Robert Jansma, USDOE, Washington, DC (United States), S.K. Fletcher, M Murphy, J Lim, Gregory Dane Wyss · 1996
When software is used in safety-critical, security-critical, or mission-critical situations, it is imperative to understand and manage the risks involved. A risk assessment methodology and toolset have been developed which are specific to software systems and address a broad range of risks including security, safety, and correct operation. A unique aspect of this methodology is the use of a modeling technique that captures interactions and tradeoffs among risk mitigators. This paper describes the concepts and components of the methodology and presents its application to example systems.