The CORAS Approach for OPM Based Risk Management

Abstract

The CORAS approach supports a model-based risk assessment on security critical systems. OPM paradigm integrates the object-oriented, process-oriented, and state transition approaches into a single frame of reference by employing a combination of graphics and a subset of English statements. This paper presents an overview of the CORAS framework based on OPM paradigm and provides an example of risk analyses to show how the CORAS framework works in risk management process.