SECURING INFORMATION ASSETS: A FRAMEWORK FOR THREAT MODELING AT THE ORGANIZATIONAL LEVEL

摘要

Threat Modeling as a mechanism, in Information Security, has been deployed in organizationsprimarily to get a handle on the nature, scope, severity and potentiality of technical level threatsto information assets. In this paper, we address the issue of developing and understanding ofthreats to information assets at the organization and inter organizational levels, with a view tofurther develop proactive management models and guidelines for anticipating and mitigating theconsequences of such threats. To this end, we survey relevant literature and provide a frameworkfor addressing the modeling of threats at the organization and inter organizational levels.