BOOKS
ABOUT ME
RISK CALCULATOR
BLOGS
Security
Reverse Engineering
Web Attacks
0
Threat Agent Factors
Skill Level
No Technical Skills
Some Technical Skills
Advanced Computer User
Network And Programming Skills
Security Penetration Skills
Motive
Low Or No Reward
Possible Reward
High Reward
Opportunity
Full Access/Expensive Resources Required
Special Access Or Resources Required
Some Access Or Resources Required
No Access Or Resources Required
Size
Developers
System Administrators
Intranet Users
Partners
Authenticated Users
Anonymous Internet Users
Vulnerability Factors
Ease of Discovery
Practically impossible
Difficult
Easy
Automated Tools available
Ease of Exploit
Theoretical
Difficult
Easy
Automated Tools available
Awareness
Unknown
Hidden
Obvious
Public Knowledge
Intrusion Detection
Active Detection In Application
Logged And Reviewed
Logged Without Review
Not Logged
Likelihood score
0
Technical Impact Factors
Loss Of Confidentiality
Minimal non-sensitive data disclosed
minimal critical data disclosed
extensive non-sensitive data disclosed
extensive critical data disclosed
All Data Disclosed
Loss Of Integrity
Minimal Slightly Corrupt Data
Minimal Seriously Corrupt Data
Extensive Slightly Corrupt Data
Extensive Seriously Corrupt Data
All Data Totally Corrupt
Loss Of Availability
Minimal Secondary Services Interrupted
minimal Primary Services Interrupted
Extensive Secondary Services Interrupted
Extensive Primary Services Interrupted
All Services Completely Lost
Loss of Accountability
Fully Traceable
Possibly Traceable
Completely Anonymous
Businesses Impact Factors
Financial damage
Less Than The Cost To Fix The Vulnerability
Minor Effect On Annual Profit
Significant Effect On Annual Profit
Bankruptcy
Reputation Damage
Minimal Damage
Loss Of Major Accounts
Loss Of Goodwill
Brand Damage
Non-compliance
Minor Violation
Clear Violation
High Profile Violation
Privacy violation
One Individual
Hundreds Of People
Thousands Of People
Millions Of People
Impact score
0