|
MS DREAD Threat Prioritization Technique |
|
Once you identify an array of threats, how do you prioritize them? Microsoft has come up with a straightforward way of deriving a quotient that represents the consolidated risk impact of a security threat.
The Microsoft DREAD is a qualitative risk analysis method that provides a consolidated quotient representing the Damage Potential, Reproducibilty, Exploitability, and Discoverability of a threat for the range of Affected Users.
Download: MS DREAD Threat Rating method |
|
Last Updated ( Sunday, 10 July 2005 )
|
Resources 
