Modular analysis and modelling of risk scenarios with dependencies

Authors:
Gyrd Brændeland;Atle Refsdal;Ketil Stølen
Affiliations:
SINTEF ICT, Oslo, Norway and Department of Informatics, University of Oslo, Oslo, Norway;SINTEF ICT, Oslo, Norway;SINTEF ICT, Oslo, Norway and Department of Informatics, University of Oslo, Oslo, Norway
Venue:
Journal of Systems and Software
Year:
2010

Citing 12
Cited 3

Bayesian networks without tears: making Bayesian networks more accessible to the probabilistically unsophisticated

AI Magazine
Conjoining specifications

ACM Transactions on Programming Languages and Systems (TOPLAS)
An axiomatic basis for computer programming

Communications of the ACM
Applying "Design by Contract"

Computer
Software Measurement: Uncertainty and Causal Modeling

IEEE Software
On the Comprehension of Security Risk Scenarios

IWPC '05 Proceedings of the 13th International Workshop on Program Comprehension
A new component concept for fault trees

SCS '03 Proceedings of the 8th Australian workshop on Safety critical systems and software - Volume 33
Unraveling Geographic Interdependencies in Electric Power Infrastructure

HICSS '06 Proceedings of the 39th Annual Hawaii International Conference on System Sciences
Formal Fault Tree Analysis - Practical Experiences

Electronic Notes in Theoretical Computer Science (ENTCS)
Proofs of Networks of Processes

IEEE Transactions on Software Engineering
Model-Driven Risk Analysis: The CORAS Approach

Model-Driven Risk Analysis: The CORAS Approach
A graphical approach to risk identification, motivated by empirical investigations

MoDELS'06 Proceedings of the 9th international conference on Model Driven Engineering Languages and Systems

Risk analysis of changing and evolving systems using CORAS

Foundations of security analysis and design VI
Evolutionary risk analysis: expert judgement

SAFECOMP'11 Proceedings of the 30th international conference on Computer safety, reliability, and security
An approach to select cost-effective risk countermeasures

DBSec'13 Proceedings of the 27th international conference on Data and Applications Security and Privacy XXVII

Quantified Score

Hi-index	0.00

Visualization

Abstract

The risk analysis of critical infrastructures such as the electric power supply or telecommunications is complicated by the fact that such infrastructures are mutually dependent. We propose a modular approach to the modelling and analysis of risk scenarios with dependencies. Our approach may be used to deduce the risk level of an overall system from previous risk analyses of its constituent systems. A custom made assumption-guarantee style is put forward as a means to describe risk scenarios with external dependencies. We also define a set of deduction rules facilitating various kinds of reasoning, including the analysis of mutual dependencies between risk scenarios expressed in the assumption-guarantee style.