Risk assessment and LAVA's (Los Alamos Vulnerability and Risk Assessment) dynamic threat analysis
- Los Alamos National Lab., NM (USA)
LAVA (the Los Alamos Vulnerability/Risk Assessment system) is a three-part systematic approach to risk assessment that can be used to model risk assessment for a variety of application systems such as computer security systems, communications security systems, and information security systems. The first part of LAVA is the mathematical methodology based on such disciplines as hierarchical system theory, event-tree analysis, possibility theory, and cognitive science. The second part is the general software engine,written for a large class of personal computers, that implements the mathematical risk model. The third part is the application data sets written for a specific application system. The methodology provides a framework for creating applications for the software engine to operate upon; all application-specific information is data. Using LAVA, we build knowledge-based expert systems to assess risks in application systems comprising a subject system and a safeguards system. The subject system model comprises sets of threats, assets, and undesirable outcomes; because the threat to security systems is ever-changing, LAVA provides for an analysis of the dynamic aspects of the threat spectrum. The safeguards system model comprises sets of safeguards functions for protecting the assess from the threats by preventing or ameliorating the undesirable outcomes; sets of safeguards subfunctions whose performance determine whether the function is adequate and complete; and sets of issues that appear as interactive questionnaires, whose measures define both the weaknesses in the safeguards system and the potential costs of an undesirable outcome occurring. 29 refs.
- Research Organization:
- Los Alamos National Lab., NM (USA)
- Sponsoring Organization:
- DOE/DP
- DOE Contract Number:
- W-7405-ENG-36
- OSTI ID:
- 5536717
- Report Number(s):
- LA-UR-89-527; CONF-891064--2; ON: DE89007990
- Country of Publication:
- United States
- Language:
- English
Similar Records
Modeling risk assessment for nuclear processing plants with LAVA
Modeling risk assessment for nuclear processing plants with LAVA (Los Alamos Vulnerability and Risk Assessment)