Flashcards
Oppgave 3 eksamen 2015
Cards in this deck (5)
- 1Draw a diagram to explain risk as a function of threat agent, vulnerability, and impact.
- 2Mention the 2 factors that determine the strength of a threat agent (attacker).Capacity, i.e. skills and resources to attack.
Motivation to attack. - 3Mention 2 typical approaches to identify relevant threat scenarios.i) Attacker-Centric threat identification,
ii) System-Centric (aka. SW, design or architecture centric) threat identification, a
iii) Asset-Centric threat identification. - 4Assume that a relevant threat scenario has been identified. Briefly describe the 2 main factors that influence the likelihood of the threat scenario to happen.The attacker (threat agent) strength.
The degree of vulnerability (ease of compromise) of the targeted/involved
components (technical or human) in the threat scenario. - 5Assume a quantitative risk model, where for a particular risk the following values are set: AV (Asset Value) = EUR 800,000, EF (Exposure Factor) = 0.2, ARO (Annualised Rate of Occurrence) = 0.5. Give the SLE (Single Loss Expectancy) and the ALE (Annualised Loss Expectancy).SLE = EUR 16,000
ALE = EUR 8,000