The Adversarial Risk Analysis Approach

In real life, the theory cannot provide a straightforward strategy used by the competitor or to be used against the competitor because it is not clear what strategy the competitor has chosen (Li & Yu,2016).

Tactical threat analysis is timely and thorough analysis and dissemination of information regarding terrorist and their current and potential activities. It allows for immediate and near-term action and provides useful warning systems. The strategic analysis of the enemy places emphasis of the organizations that may conduct terrorist attacks against the United States (Force n.d.). Being able to knowingly identify financial and political sources of support, motivation, goals, current and future capabilities, and vulnerabilities of those organizations will assist in preventing and preempting future attacks and in taking long-term actions that will weaken support for organizations that seek to bring harm to any United States

If two choices are given to a person, but one is lacking in explicit probability information, then the individual will tend to default to the choice with more explicit information about probability of each outcome. For instance, there are two boxes filled with black and white balls that a person can choose from and there is a possible monetary reward associated with drawing a ball of certain color from either bag. However, the person knows that one bag is half white balls and half black, while they don’t know the composition of the other bag. Whether the ball they needed to draw was black or white, people tended to choose the bag with equal amounts of each color balls. This has been dubbed the ambiguity effect, which basically means we have a preference for known probabilities over ambiguous ones.

Risk identification takes place when an organization identify their assets by organizing, categorizing, and prioritizing the data into small groups that are alike (Whitman & Mattord, 2014). Risk identification starts with detecting information assets. An information asset is a set of data that is structured, well defined, and managed as a single component. The information assets in my personal life include my home computer (desktop), laptop, tablet, application software, cell phone, and myself.

Kenneth N. Waltz provides a solution to this dilemma and advocates minimal deterrence not in terms of force size, but with respect to likely punishment. Moreover Stanley Sienkiewicz also maintains that uncertainty leads to strategic stability and balance as both adversaries remain ambiguous of likely response.

In 1925, Lund first made the claim that perhaps the order of presented information has an effect upon the decisions made by individuals, theorising that information presented last will be the most powerful in altering these choices (in Furnham, 1986). Since then, a huge topic of debate has been sparked as to how information should be presented in various situations in everyday life. Perhaps most important of these situations is that of a courtroom. When deciding if a person is innocent or guilty, one should examine all the evidence equally and fairly, assessing everything before coming to an informed conclusion. However, if the recency effect does indeed exist, it implies that this is not always the case and that a judgement will be reached

In this paper, we present an optimal attack framework that can take down a sensing system even with truth discovery empowered. Compared with the aforementioned native attack strategy, the proposed optimal attack strategy makes the malicious workers behave ``smarter''. They can successfully disguise themselves as normal workers. If there is little hope to achieve the attack goal on some objects, they will tend to agree with the normal workers on those objects to gain higher weights, and in turn, can exert stronger impact on other

The theory of rational choice is based on the analysis of human behavior which was established by the Italian scholar Marchese Beccaria (Cesare Beccaria -1986). The theory of rational choice differs from many other criminal theories, mainly due to its main principal that defines crime as an exclusive individual choice. Using the 'Rational Choice Theory' Mass surveillance ‘supporters, in order to support their argument they note that the attacker (cybercriminal) follows a set of logical steps, in order to achieve his goal (compromise the target system and steal/modify data, disrupt services).Also the attacker is considered a rational individual that always plans an attack with the aim of gaining the maximum profit while the risk of being captured

Makes testable predictions: Large threats might be offset by perceived costs; small threats by large benefits etc.

The enemy AI needs to make decisions based on where the player is located, and attempt to move towards the player. This can only be accomplished through a series of ‘Yes and No’, or ‘True and False’, trials. The AI will ask questions such as, “Is the player above me? Is the player below me?” and so forth, therefore, the tree will need to generate and decide on finding the best path to take to approach the player. In order to achieve this, a data structure known as a Decision Tree is required.

The two strategies I played against are to defect or cooperate when playing the Flip-a-coin strategy and the Massive Retaliatory Strike. In both cases when I cooperated one-hundred percent, I had a huge loss to the computer, my score for the flip coin toss was 21 to the computers 86 when I choose just to cooperate. In the massive retaliatory strike when I cooperated all the time my score was 60 and the machine was 60, so in this case, no one won, but we tied or it is a win-win scenario. In the flip-coin toss when I defected, I won, my score was 76 against the computer’s score of 6. When I defected all the time in the massive retaliatory strike, my score was 24 to the computer’s score of 16. When I played the game tit for tat and defected all

Threat modeling is a way to categorize threats using a structured approach to address the threats with the most potential to do damage to a network. An example of a threat model that is commonly used to rate threats is DREAD, this acronym stands for Damage, Reproducibility, Exploitability, Affected users, and Discoverability. Each of these categories is assessed a value from 0-10 with 0 being nothing and the being the most serious risk. (OWASP, n.d.) An approach such as this will assist an organization in determining the importance and priority of threats on their network. Another commonly used threat model is STRIDE, as seen in Table 2. The following sections will walk through the entire process of threat modeling.

Game theory cannot always predict reliable outcomes for real-life situations as it is more an

The probability, or likelihood, of an information security event can be further defined as “The ability of a threat to exploit a vulnerability or weakness”. In a cybersecurity event we consider the capabilities and motivation of an attacker against the level of effort to exploit the vulnerability or weakness.

A risk assessment is something that is produced to help carry out a risk assessment of what might cause harm to the service users and what needs to be carried out in order to avoid the risks from taking place . It is something by law that is expected for all the workplace to carry out. This links in with the HSAWA as every workplace when opening up a business they need to follow the rules and regulation in order to keep the environment safe as well as the employees. When creating risk assessments it’s about producing a table of which identifies all the possible hazards that could take place in the workplace. Every workplace must produce a risk assessment and by creating this you are pointing out all the risk that could