Text size
  • Small
  • Medium
  • Large
  • Standard
  • Blue text on blue
  • High contrast (Yellow text on black)
  • Blue text on beige

    Model Based Security Risk Analysis for Web Applications

    EuroWeb 2002 Conference

    St Anne's College, Oxford, UK. 17-18 December 2002


    T. Dimitrakos, D. Raptis, B. Ritchie & K. Stølen


    Security evaluation and security assurance are important aspects of trust in e-business. CORAS is a European project which is developing a tool-supported framework for precise, unambiguous, and efficient risk assessment of security critical systems.

    The framework is obtained through adapting, refining, extending, and combining methods for risk analysis of critical systems and semiformal modelling methods.

    In this paper we provide an overview of the CORAS framework for model-based risk assessment, emphasising its application on Web-enabled B2C e-commerce services and the meta-data based deployment model underpinning the CORAS extensible platform for tool inclusion.


    PDF filePDF Version of this Paper (318kb)