New paper on risk estimation factors

Eric | March 26, 2015

The Computers & Security journal, Elsevier, published online, recently, our paper “Incorporating Attacker Capabilities in Risk Estimation and Mitigation“. We propose in this paper the use of attacker capabilities in estimating the risk of threats. Attacker capabilities are the abilities to access system resources that allow to attack the system. We argue that the proposed factor allows the experts to have close risk estimates, which would increase the confidence in risk assessment.

Cross-posted from SEEBlog

Related Posts

  1. New paper on Reducing Human Factors in Software Security Architectures
  2. Denial-of-App Attack on Android will be presented at SPSM 2014
  3. Google Confirms Denial-of-”App” Attack – Likely All Android Versions Affected
  4. Google Confirms Tapjacking Attack – Likely All Versions Are Affected!
  5. New Course Secure Software Development (SecDev)
Categories
Research
Comments rss
Comments rss

« »