Vorschau

The focus on Common Criteria means that the security problem becomes the target of consideration. Common approaches are central to threat modeling to capture security-relevant aspects, but that is not enough to describe the inherent reasons for security problems. The knowledge or assumptions about existing vulnerabilities open a Security Problem Definition (SPD) and force a risk assessment