Text size
  • Small
  • Medium
  • Large
Contrast
  • Standard
  • Blue text on blue
  • High contrast (Yellow text on black)
  • Blue text on beige

    Model Based Security Risk Analysis for Web Applications

    EuroWeb 2002 Conference

    St Anne's College, Oxford, UK. 17-18 December 2002

    AUTHORS

    T. Dimitrakos, D. Raptis, B. Ritchie & K. Stølen

    ABSTRACT

    Security evaluation and security assurance are important aspects of trust in e-business. CORAS is a European project which is developing a tool-supported framework for precise, unambiguous, and efficient risk assessment of security critical systems.

    The framework is obtained through adapting, refining, extending, and combining methods for risk analysis of critical systems and semiformal modelling methods.

    In this paper we provide an overview of the CORAS framework for model-based risk assessment, emphasising its application on Web-enabled B2C e-commerce services and the meta-data based deployment model underpinning the CORAS extensible platform for tool inclusion.

    PAPER FORMATS

    PDF filePDF Version of this Paper (318kb)