coras-announce Mailing List for CORAS Risk Assessment Platform

(We apologize if you receive multiple copies of this message)

It is our pleasure to invite you to attend a half-day tutorial on
the CORAS risk analysis process, modelling language and tools. =20
The tutorial will be held during the Third International Conference=20
on Trust Management (iTrust'05), on Monday May 23rd in Rocquencourt,
France (close to Versailles/Paris). =20

There will also be a separate CORAS Tool demonstration session=20
during the conference.


 Tutorial abstract:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
The CORAS EU-project developed a framework for model-based security
risk analysis.  Recent work has focused on the application and
adaptation of this framework to the analysis of trust and legal
issues.  The CORAS framework consists of a methodology, a language,
and a computerised tool.  The methodology integrates aspects from
partly complementary risk analysis techniques, like HazOp, FMEA,=20
and FTA, with state-of-the-art system modelling methodology based on=20
UML 2.0.  A graphical threat modelling language has been developed to
support documentation and communication of security analysis results.

The tutorial will present the CORAS methodology and language and give
a walkthrough of an analysis of an example scenario.  After the
tutorial, the participants should be familiar with the overall CORAS
risk analysis process as well as the threat modelling language. =20
The tutorial will also show how to use the CORAS Tool together with
external software development and risk analysis tools to document and
maintain risk analysis results.


For more information about the iTrust'05 conference please visit
http://www-rocq.inria.fr/arles/events/iTrust2005/

For more information about CORAS please visit
http://coras.sourceforge.net/=20
or send an email to Fre...@si...


Best regards,

The CORAS development team
SINTEF Information and Communication Technology
http://www.sintef.no/ict