LAVA (Los Alamos Vulnerability and Risk Assessment) and classical risk analysis
LAVA (the Los Alamos Vulnerability/Risk Assessment system) is a three-part systematic approach to risk assessment that can be used to model risk assessment for a variety of application systems such as computer security systems, communications security systems, information security systems, and others. The first part of LAVA is the mathematical methodology based hierarchical systems theory, fuzzy systems theory, decision analysis, utility theory, and cognitive science; clear relationships exist between LAVA's approach and classical risk analysis. The second part, written for a large class of personal computers, is the general software engine that implements the mathematical risk model. The third part is the application data sets, each written for a specific application system; all application-specific information is data. Application models are knowledge-based expert systems to assess risks in application systems comprising sets of threats, assets, undesirable outcomes, and safeguards. The safeguards system model is in three segments: sets of safeguards functions for protecting the assets from the threats by preventing or ameliorating the undesirable outcomes, sets of safeguards subfunctions whose performance determines whether the function is adequate and complete, and sets of issues, appearing as interactive questionnaires, whose measures define both the weaknesses in the safeguards system and the potential costs of undesirable outcome occurrence. 29 refs.
- Research Organization:
- Los Alamos National Laboratory (LANL), Los Alamos, NM (United States)
- DOE Contract Number:
- W-7405-ENG-36
- OSTI ID:
- 6074695
- Report Number(s):
- LA-UR-89-1558; CONF-8906141-1; ON: DE89013210
- Resource Relation:
- Conference: Computer security risk management model builders workshop, Ottawa, Canada, 20 Jun 1989; Other Information: Portions of this document are illegible in microfiche products
- Country of Publication:
- United States
- Language:
- English
Similar Records
Modeling risk assessment for nuclear processing plants with LAVA (Los Alamos Vulnerability and Risk Assessment)
Modeling risk assessment for nuclear processing plants with LAVA
Related Subjects
99 GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE
LASL
SAFEGUARDS
RISK ASSESSMENT
EXPERT SYSTEMS
COMPUTER CODES
INFORMATION SYSTEMS
MATHEMATICAL MODELS
ON-LINE SYSTEMS
PERSONAL COMPUTERS
SECURITY
VULNERABILITY
COMPUTERS
DIGITAL COMPUTERS
MICROCOMPUTERS
NATIONAL ORGANIZATIONS
US AEC
US DOE
US ERDA
US ORGANIZATIONS
055001* - Nuclear Fuels- Safeguards
Inspection
& Accountability- Technical Aspects
990210 - Supercomputers- (1987-1989)
990220 - Computers
Computerized Models
& Computer Programs- (1987-1989)