Threat Scenario Dependency-Based Model of Information Security Risk Analysis

Asset dependency paradigm can help us to represent the phenomena of risk dependency on the relevant assets. This paper is aimed to propose the information security risk analysis model, based on the threat-scenario dependency paradigm to represent the asset dependency. Two current approaches of asset dependency representation, threat dependency and security dimension dependency, still have limitations on consistency and the formulation of control's role to reduce the risk. The proposed model can improve the consistency of threats mapping and the control's roles to reduce the likelihood and degradation value of threat.