An information-driven approach to network security

Risk analysis must be used to help telecommunication managers to decide how much it is appropriate to spend on security countermeasures and where, within the network, this spending should be directed. Risk analysis is based on the concepts of threat, vulnerability, attack, risk and countermeasure. Structured risk analysis, a hybrid methodology developed by Hyperion Systems Limited in the UK, is discussed