Risk analysis is the identification and documentation of risks with respect to an organisation or a target system. Established risk analysis methods and guidelines typically focus on a particular system configuration at a particular point in time. The resulting risk picture is then valid only at that point in time and under the assumptions made when it was derived. However, systems and their environments tend to change and evolve over time. In order to appropriately handle change, risk analysis must be supported with specialised techniques and guidelines for modelling, analysing and reasoning about changing risks. In this paper we introduce general techniques and guidelines for managing risk in changing systems, and then instantiate these in the CORAS approach to model-driven risk analysis. The approach is demonstrated by a practical example based on a case study from the Air Traffic Management (ATM) domain.

Original document

The different versions of the original document can be found in:

http://dx.doi.org/10.1007/978-3-642-23082-0_9 under the license http://www.springer.com/tdm
Back to Top

Document information

Published on 31/12/10
Accepted on 31/12/10
Submitted on 31/12/10

Volume 2011, 2011
DOI: 10.1007/978-3-642-23082-0_9
Licence: Other

Document Score


Views 3
Recommendations 0

Share this document

claim authorship

Are you one of the authors of this document?