DREAD: Risk assessment model

DREAD is part of a system for classifying computer security threats used at Microsoft. It provides a mnemonic for risk rating security threats using five categories.

The categories are:

• Damage - how bad would an attack be?
• Reproducibility - how easy it is to reproduce the attack?
• Exploitability - how much work is it to launch the attack?
• Affected users - how many people will be impacted?
• Discoverability - how easy it is to discover the threat?

The DREAD name comes from the initials of the five categories listed. It was initially proposed for threat modeling, but is now used more broadly.

When a given threat is assessed using DREAD, each category is given a rating. For example, 3 for high, 2 for medium, 1 for low and 0 for none. The sum of all ratings for a given exploit can be used to prioritize among different exploits.

External links

• Improving Web Application Security: Threats and Countermeasures
• DREADful, an MSDN blog post

This computer security article is a stub. You can help Wikipedia by expanding it.v · Categories: Computer security Computer security stubs Wikimedia Foundation. 2010. Игры ⚽ Поможем написать реферат List of races in Farscape Dream 1 Look at other dictionaries: Dread — may refer to Dread (fear), a fearful emotion. Angst, a profound and deep seated spiritual condition of insecurity and despair in the free human being in Existentialist thought A short story in horror author Clive Barker s Books of Blood… …   Wikipedia mental disorder — Any illness with a psychological origin, manifested either in symptoms of emotional distress or in abnormal behaviour. Most mental disorders can be broadly classified as either psychoses or neuroses (see neurosis; psychosis). Psychoses (e.g.,… …   Universalium Electronic health record — This article is about shared or comprehensive computerized health care records in enterprise wide systems. For local computerized records in a specific health care organization, see Electronic medical record. Sample view of an electronic health… …   Wikipedia Social phobia — DiseaseDisorder infobox Name = Social phobias ICD10 = ICD10|F|40|1|f|40, ICD10|F|93|2|f|90 ICD9 = ICD9|300.23 Social phobia (DSM IV 300.23), also known as social anxiety disorder [ [http://www.webmd.com/anxiety panic/guide/mental health social… …   Wikipedia Anxiety — For other uses, see Anxiety (disambiguation). Anxiety A marble bust of the Roman Emperor Decius from the Capitoline Museum. This portrait conveys an impression of anxiety and weariness, as of a man shouldering heavy [state] responsibilities …   Wikipedia literature — /lit euhr euh cheuhr, choor , li treuh /, n. 1. writings in which expression and form, in connection with ideas of permanent and universal interest, are characteristic or essential features, as poetry, novels, history, biography, and essays. 2.… …   Universalium List of minor characters in Judge Dredd — This is a list of minor characters in the British comic strip Judge Dredd appearing in 2000 AD, Judge Dredd Megazine and related publications. They are listed alphabetically by surname, in categories. Contents 1 Judges of Mega City One 1.1 …   Wikipedia Intellectual giftedness — Gifted redirects here. For other uses, see Gift (disambiguation). Human intelligence Abilities and Traits Abstract thought Communication  …   Wikipedia WOMAN — This article is arranged according to the following outline: the historical perspective biblical period marriage and children women in household life economic roles educational and managerial roles religious roles women outside the household… …   Encyclopedia of Judaism Anger — This article is about the emotion. For other uses, see Anger (disambiguation). Angry , Indignation , and Wrath redirect here. For other uses, see Angry (disambiguation), Indignation (disambiguation), and Wrath (disambiguation). Emotions Affection …   Wikipedia 18+ © Academic, 2000-2024 Contact us: Technical Support, Advertising Dictionaries export, created on PHP, Joomla, Drupal, WordPress, MODx. Mark and share Search through all dictionaries Translate… Search Internet Share the article and excerpts Direct link … Do a right-click on the link above and select “Copy Link”