Threat Analysis Framework.

Duggan, D. P. ; Michalski, J. T.

Technical Information Center Oak Ridge Tennessee

关键词: Threat evaluation;    Computer security;    Defense systems;    Computers;    Mitigation;   

RP-ID  :  DE2008921122

学科分类：工程和技术（综合）

美国|英语

来源: National Technical Reports Library

【 摘 要 】

The need to protect national critical infrastructure has led to the development of a threat analysis framework. The threat analysis framework can be used to identify the elements required to quantify threats against critical infrastructure assets and provide a means of distributing actionable threat information to critical infrastructure entities for the protection of infrastructure assets. This document identifies and describes five key elements needed to perform a comprehensive analysis of threat: the identification of an adversary, the development of generic threat profiles, the identification of generic attack paths, the discovery of adversary intent, and the identification of mitigation strategies.