Modeling Security Threats to Cryptographically Protected Data
Alexandra Savelieva, Sergey Mikchailovitch Avdoshin · Proceedings of the Spring/Summer young researchers' colloquium on software engineering · 2009
In this paper, we introduce a mathematical model of threats for analyzing the security of cryptographic systems based on risk management principles.We also provide economic indicators as a basis to build a rationale for investments to cryptographic systems.Some points of designing software tools to support our methodology are covered in the paper.The new approach that incorporates the threat model, automatic cryptographic strength verification tools and economic techniques, is instrumental for providing sound arguments to choose a cryptographic system and for implementing an information security strategy.An overview of alternative approaches is provided along with the results of comparative analysis revealing their drawbacks as compared to the method presented in this paper.