Risk-Based Systems Security Engineering Essay Example | Topics and Well Written Essays - 250 words

Risk-Based Systems Security Engineering - Essay Example The subjectivity of Morda necessitates sensitivity analysis to study the change of attack scores with respect to one another with the change of values of the subjective variables. With Morda assessment, a risk posture can be produced for a proposed architecture, that not only drives the engineering process of the system security but also influences the development of countermeasures. Costs of the countermeasure include but are not limited to expenses of purchase and maintenance, and backward compatibility whereas the benefit is effective mitigation of the risk. Morda offers an unbiased metric to the decision makers by assessing risk formally and systematically. Thus, decision makers can make informed decisions to identify proper strategy of defense. The Morda process identifies the single attacks that are most lucrative, but it does not consider the attack portfolios that are made over time so that ongoing adversary objectives can be