DMCA
A process for assessing voting system risk using threat trees (2010)
| Venue: | In Conference on Information Systems Applied Research |
| Citations: | 2 - 0 self |
BibTeX
@INPROCEEDINGS{Yasinsac10aprocess,
author = {Alec Yasinsac and Harold Pardue},
title = {A process for assessing voting system risk using threat trees},
booktitle = {In Conference on Information Systems Applied Research},
year = {2010}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Security continues to be a critical issue in the safe operation of electronic voting machines. Risk assessment is the process of determining if a particular voting system is at risk and what steps can be taken to mitigate the risk. We propose an iterative risk assessment process using threat trees. This process involves using a voting system risk taxonomy to categorize a threat, a schema to ex-press logical hypothesis about a threat, generating a threat tree through functional decomposition, expressing threat instance semantics as nodal properties with metrics, validating the threat in-stance through independent representations, and finally pruning the tree for enhanced usability and understandability. This process provides guidance to an analyst in using threat trees to con-duct risk assessment of electronic voting systems. Because this process is based on abstract and extendable structures, it facilitates the comparison and validation of independent risk evaluations. Prospective voting system risk assessment metrics are provided.
Keyphrases
threat tree voting system risk critical issue nodal property safe operation con-duct risk assessment electronic voting machine risk assessment threat instance semantics voting system risk taxonomy extendable structure threat in-stance electronic voting system ex-press logical hypothesis independent risk evaluation particular voting system functional decomposition independent representation iterative risk assessment process enhanced usability
