With the scope definition, we set the foundation of a TARA project. The scope defines how the TARA will be addressed. In addition to describing the item definition and its operational environment, at this step we describe technical assumptions for the TARA, e.g., about existing controls, existing vulnerabilities, cybersecurity goals, or cybersecurity claims. Any special features of the TARA project are described in the scope. In addition, we describe the attacker model and its capabilities. We also define the impact categories for the damage scenarios in the context of the scope. In this chapter, we also introduce the practical case studies that will be presented throughout the book.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Defining the Scope of a TARA Project

  • Rodrigo do Carmo,
  • Alexander Schlensog

摘要

With the scope definition, we set the foundation of a TARA project. The scope defines how the TARA will be addressed. In addition to describing the item definition and its operational environment, at this step we describe technical assumptions for the TARA, e.g., about existing controls, existing vulnerabilities, cybersecurity goals, or cybersecurity claims. Any special features of the TARA project are described in the scope. In addition, we describe the attacker model and its capabilities. We also define the impact categories for the damage scenarios in the context of the scope. In this chapter, we also introduce the practical case studies that will be presented throughout the book.