Risk Analysis
Automated Risk Assessment for Socio-Technical Systems
I am currently involved in the large EU FP7 project TREsPASS (Technology-supported Risk Estimation by Predictive Assessment of Socio-technical Security) that focuses on effective risk assessment for socio-technical systems.
I am interested in automating the risk assessment processes, including:
- Automated generation of attack and defence scenarios, expressed as attack-defence trees, from socio-technical models
- Ranking of attacks and defences
- Automated selection of countermeasures
