Forensic Analysis of Risks in Enterprise Systems.

This paper discusses a novel technique that manages risks to an enterprises in terms of how well hardened the enterprise is against attack. Using the concept of formal analysis of covert channels between security policy domains, The Forensic Analysis of Risks in Enterprise Systems process addresses threats, vulnerabilities, impacts and countermeasures from the perspective of forensic analysis of target enterprises responding to various threat models. The process for Forensic Analysis of Risks in Enterprise System was described. It is feasible to conduct a risk-based analysis of an enterprise network by modeling the interactions of its security policy domains both with each other and in response to a set of threat against them. Some of the benefits realized from applying this type of analysis instead of applying brute-force testing was outlined.