Towards a UML Profile for Model-Based Risk Assessment (2002)
Cached
Download Links
| Venue: | Munich University of Technology |
| Citations: | 21 - 12 self |
BibTeX
@INPROCEEDINGS{Houmb02towardsa,
author = {Siv Hilde Houmb and Folker Den Braber and Mass Soldal Lund and Ketil Stølen and Sintef Telecom Informatics},
title = {Towards a UML Profile for Model-Based Risk Assessment},
booktitle = {Munich University of Technology},
year = {2002},
pages = {79--91}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
The EU-funded CORAS project (IST-2000-25031) is developing a framework for model-based risk assessment of security-critical systems. This framework is characterised by: (1) A careful integration of aspects from partly complementary risk assessment methods. (2) Guidelines and methodology for the use of UML to support and direct the risk assessment methodology. (3) A risk management process based on AS/NZS 4360 and ISO/IEC 17799. (4) A risk documentation framework based on RM-ODP. (5) An integrated risk management and system development process based on UP. (6) A platform for toolinclusion based on XML. This paper focuses on one specific aspect of the CORAS framework, namely the CORAS UML profile for risk assessment. In particular, it explains its role in the CORAS risk management process and demonstrates its use in the risk assessment of an e-Commerce system.
Keyphrases
model-based risk assessment uml profile risk assessment cora uml profile iso iec risk management process risk assessment methodology cora framework eu-funded cora project e-commerce system risk management complementary risk assessment method cora risk management process specific aspect security-critical system careful integration system development process risk documentation framework
