Skip to main content

Abstract

In this chapter, we explain the importance of risk analysis in general. The asset-driven and model-based approach of CORAS is explained and motivated, and the overall aims of the book are given. The chapter furthermore gives a structural overview of the book, including its decomposition into parts and chapters and how these are related.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

eBook
USD 16.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 54.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    CORAS is the name of our approach, and is written in capital letters; it is not, and has never been, an acronym.

References

  1. Baker, W.H., Hylender, C.D., Valentine, J.A.: 2008 data breach investigations report. A study conducted by the Verizon business risk team, Verizon (2008)

    Google Scholar 

  2. Computer Security Institute: 2008 CSI Computer Crime and Security Survey (2008)

    Google Scholar 

  3. Computer Security Institute: 2009 CSI Computer Crime and Security Survey (2009)

    Google Scholar 

  4. Department for Business, Enterprise & Regulatory Reform: 2008 Information Security Breaches Survey (2008)

    Google Scholar 

  5. International Organization for Standardization: ISO 31000 Risk management – Principles and guidelines (2009)

    Google Scholar 

  6. Poulsen, K.: Slammer worm crashed Ohio nuke plant network. SecurityFocus (2003)

    Google Scholar 

  7. Poulsen, K.: Sluggish movement on power grid cyber security. SecurityFocus (2004)

    Google Scholar 

  8. PriceWaterhouseCoopers: The global state of information security 2010 (2009)

    Google Scholar 

  9. SOPHOS: Security threat report: 2010 (2010)

    Google Scholar 

  10. Standards Australia/Standards New Zealand: AS/NZS 4360 Risk Management (2004)

    Google Scholar 

  11. Symantec: Symantec global internet security threat report – trends for 2008 (2009)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Mass Soldal Lund .

Rights and permissions

Reprints and permissions

Copyright information

© 2011 Springer-Verlag Berlin Heidelberg

About this chapter

Cite this chapter

Lund, M.S., Solhaug, B., Stølen, K. (2011). Introduction. In: Model-Driven Risk Analysis. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-12323-8_1

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-12323-8_1

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-12322-1

  • Online ISBN: 978-3-642-12323-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics