TAME: A Threat Assessment Model for the METEORE System

The wide development of the mobile Internet technology is creating the opportunity for companies to utilise Electronic Payment Systems for the delivery of services. Due to that, organisations have been forced to allocate considerable resources for protecting their information assets. Unfortunately the opportunity still exists for systems to be exploited with catastrophic results. Modern security management methods now acknowledge that most risks cannot be completely eliminated and that they need to be managed in a cost effective manner. This paper will concentrate on the development of a method for the assessment and analysis of threat and vulnerabilities within the context of security risk management. We will discuss a methodology developed with the needs of electronic payment systems in mind, which focuses upon the technical, socio-technical and business aspects of the system. Threat, Vulnerability, Threat Agent, Threat Impact, Security Audit, Vulnerability Analysis, Threat Assessment