Security Modelling for Risk Analysis
Lam For Kwok, Dennis Longley · 2004
A security model to facilitate the recording and investigation of organisational security data is proposed; this model employs a directory structure for security entities and relationships. The model database with associated software may then be employed to develop and display organisational threat networks representing the risk environment of the organisational information processing and communication system. Thereafter the design of the defence systems may be facilitated by interactive procedures to determine appropriate countermeasure structures.