Download Oblig 2 -

Obligatory Exercise 2 by group 4 – CORAS Report
Rayner(raynerv), Maja (majasm), Lavdim(lavdima), Vegard(vegaaa), Vincent(vincentg), Tonje(tonjeek)
Introduction
In this document we will conduct a security risk analysis for the IKILLUsystem. Through the
course INF5150 we have been introduced to a method-based security analysis called CORAS.
The CORAS method consists of seven steps, which we have tried to follow through out this
document. The CORAS method also provides a tool do support documenting, maintaining
and reporting analysis result. In our case we have used the tool do make the design of the
stakeholder with our defined assets, draw the threat diagrams with different consequences and
likelihoods for the assets. We also used it to draw the risk overview diagram and the risk
treatments diagrams for the assets; user information, points and availability. By using the
„export as image‟ feature of the tool we have implemented the diagrams as shown below.
Security analysis
Step1 – Introduction
Goal of the analysis
Find the weaknesses of the target of analysis. Recommend treatments.
Target
Our main target will be focused towards the IKILLUsystem.
Mobile
PATS
Internet
Our focused target
IKILLUsystem
Underlying
hardware
Figure : Illustrates where our main focus of the system will be.
Assumptions
We will in our security analysis concentrate on the IKILLUSystem.
The person who is the admin of the game is also the owner of the system and has a stake in
the company profits.
3