00000cmm a22000004i 4500 UP-99796217611135143 Buklod 20140301110550.0 m go j cr |n |||auu|a 101029s2011 xx u | eng d 9783642123238 (eBook) 3642123236 (eBook) (iLib)UPD-00214604154 DLC DML eng DMLUC T1 74.5 L86 2010eb Lund, Mass Soldal. Model-driven risk analysis [electronic resource] The CORAS approach by Mass Soldal Lund, Bjørnar Solhaug, Ketil Stølen. Berlin Heidelberg Springer 2011. 1 online resource (xvi, 460 p.) ill. (some col.) Part I: Introductory Overview 1) Introduction - 2) Background and Related Work - 3) A Guided Tour to the CORAS Method Part II: Core Approach 4) The CORAS Risk Modeling Language - 5) Preparations for the Analysis - 6) Customer Presentation of Target - 7) Refining the Target Description Using Asset Diagrams - 8) Approval of Target Description - 9) Risk Identification Using Threa Diagrams - 10) Risk Estimation Using Risk Diagrams - 11) Risk Evaluation Using Risk Evaluation Diagrams - 12) Risk Treatment Using Treatment Diagrams Part III: Selected Issues 13) Analysing Likelihood Using CORAS Diagrams - 14) The High-Level CORAS Language - 15) Using CORAS to Support Change Management - 16) The Dependent CORAS Language - 17) Using CORAS to Analyse Legal Aspects - 18) The CORAS Tool Part IV: Appendices A) CORAS Language Grammar - B) CORAS Language Semantics - C) CORAS Guidelines IP-based subscription, access limited to within on-campus computer network. Access via Electronic Resources of the UPD University Library Website. The term -risk- is known from many fields, and we are used to references to contractual risk, economic risk, operational risk, legal risk, security risk, and so forth. We conduct risk analysis, using either offensive or defensive approaches to identify and assess risk. Offensive approaches are concerned with balancing potential gain against risk of investment loss, while defensive approaches are concerned with protecting assets that already exist. In this book, Lund, Solhaug and Stølen focus on defensive risk analysis, and more explicitly on a particular approach called CORAS. CORAS is a model-driven method for defensive risk analysis featuring a tool-supported modelling language specially designed to model risks. Their book serves as an introduction to risk analysis in general, including the central concepts and notions in risk analysis and their relations. The authors? aim is to support risk analysts in conducting structured and stepwise risk analysis. To this end, the book is divided into three main parts. Part I of the book introduces and demonstrates the central concepts and notation used in CORAS, and is largely example-driven. Part II gives a thorough description of the CORAS method and modelling language. After having completed this part of the book, the reader should know enough to use the method in practice. Finally, Part III addresses issues that require special attention and treatment, but still are often encountered in real-life risk analysis and for which CORAS offers helpful advice and assistance. This part also includes a short presentation of the CORAS tool support. The main target groups of the book are IT practitioners and students at graduate or undergraduate level. They will appreciate a concise introduction into the emerging field of risk analysis, supported by a sound methodology, and completed with numerous examples and detailed guidelines. Electronic reproduction. New York SpringerLink c2011. Available via World Wide Web through SpringerLink. Risk assessment Computer simulation. Risk management. Electronic books. Solhaug, Bjornar. Stølen, Ketil. SpringerLink (Online Service). Available for University of the Philippines Diliman via SpringerLink. Click here to access http://link.springer.com/book/10.1007/978-3-642-12323-8 (viewed 22 September 2014) FO Monograph UPD DMLR Electronic Resource