Defining the Scope of a TARA Project
摘要
With the scope definition, we set the foundation of a TARA project. The scope defines how the TARA will be addressed. In addition to describing the item definition and its operational environment, at this step we describe technical assumptions for the TARA, e.g., about existing controls, existing vulnerabilities, cybersecurity goals, or cybersecurity claims. Any special features of the TARA project are described in the scope. In addition, we describe the attacker model and its capabilities. We also define the impact categories for the damage scenarios in the context of the scope. In this chapter, we also introduce the practical case studies that will be presented throughout the book.