A novel risk management approach, called NetRAM, that has been developed. It consists in an automated multi-process approach that assists information technology systems administrators and managers in their work to reduce security risks that threaten their assets. Three major concepts have been emphasized: a hierarchical data structure, which is based on the notion of attack tree, the optimization problem for risk analysis, and the control of the system security state. A key characteristic of NetRAM is that it is heterogeneous, meaning that it integrates three different components:

1. software tools

2. architectural design methodologies

3. theoretical models.
    

1. NetRAM Features

2. Netram Life cycle

Eight main processes constitute the NetRAM Life cycle:

1. Asset analysis: identify all the network elements

2. Vulnerability identification module: identify vulnerabilities that can be exploited by attackers

3. Threats analysis: define for each resource the possible attacks that can target it.

4. Risk analysis module: define for each resource the risks and then establish risk scenarios and evaluate them. 

5. Countermeasures Proposal: generate automatically a list of candidate countermeasures.

6. Countermeasures Selection: propose the selection of security solutions is automatically made.

7. Monitoring: aim at detecting intrusions and responding to security incidents.

8. Incident response: make response imperative after the detection of any intrusion.

   

3. Netram Risk Analysis Practices

The Risk analysis practices aim at building libraries for threats, vulnerabilities and scenarios. It also estimates the risk and impact of threats.

4. Related theories

1. SECOMO: (SEcurity COst MOdel) A security cost model for evaluating  the effort required by security projects and for developing corresponding accurate time-schedules

2. ASRAD: (Algebraic Specification for Risk Analysis and Decisions): A model for algebraic specification of risk analyses and formal representation of the risk management processes

5. Selected publications

1. A Declaration Framework System for Computer Network Intrusion Detection

2. Extended Relational Algebra: Application to computer network security

3. Relational Structuring of Security Databases

4. Cognitive Map-based Model for Quantitative Proactive Risk Analysis

5. Cooperative Intrusion Detection and Tolerance System