| Work Product (Artifact): Threat Analysis |
|
 |
| This work product identifies assets, their vulnerabilities, and effects of countermeasures of the security of those assets. |
|
Purpose
| The purpose of the threat analysis is to identify and understand the assets of a system requiring protection, the
vulnerabilities they exhibit, the risk (severity and likelihood) of their exploitation due to attack. the effects of
countermeasures required to protect those assets. |
Relationships
| Roles | Responsible:
| Modified By:
|
| Input To | Mandatory:
| Optional:
| External:
|
| Output From |
|
Main Description
| Security is the protection of data and other assets from intrusion, theft, inappropriate usage, interference, unauthorized
access, tampering, damage, or loss. An asset is an element of value which may be compromised, blocked, or stolen.
A vulernability is means by which an attack can compromise an asset. A countermeasure is a design or operational means to
prevent, block, or otherwise manage an attack. |
Properties
| Optional |  |
| Planned | |
© Copyright IBM Corp. 1987, 2010. All Rights Reserved.
|
|
