The CORAL approach is a model-based method to security testing employing risk assessment to help security testers select and design test cases based on the available risk picture. In this paper we present experiences from using CORAL in an industrial case. The results indicate that CORAL supports security testers in producing risk models that are valid and threat scenarios that are directly tes...

private retirement savings programs reThis study examines the tax-favored results in the largest single category of tax tirement savings behavior of non-self-emexpenditures in the budget, both before ployed households. Our estimates suggest and after TRA 86. Previously, the U.S. that perceptions of the household's marTreasury (1986) had estimated 59.2 bilginal tax rate are of limited importance...

The field of Information Systems is about bridging the digital and information divide. Advances in the digital world enable information to be stored and structured in a manner that facilitates effective use of the information for future modelling purposes. Elderly inpatient falls are a common global phenomenon, and an inpatient fall incident can have severe consequences for the patient, caregiv...

Petri Nets (PNs) and their variations are a graphical, mathematical language that can be used for the specification, analysis and verification of discrete event systems, including Critical Infrastructures (CIs). Colored PNs are an extension of classical PNs that are suitable for modeling and analyzing complex interconnected CIs. Timed PNs are another extension of PNs that support timing constra...

On December 14, 2001, the Payment Cards Center of the Federal Reserve Bank of Philadelphia held a workshop exploring retail credit risk modeling practices and evolving techniques. The workshop was led by Paul Calem, a senior economist at the Board of Governors, Division of Research and Statistics. Calem is currently involved in the Board's efforts supporting reforms to the international Basel C...

It is possible to build useful models for software project risk assessment based on Bayesian networks. A number of such models have been published and used and they provide valuable predictions for decision-makers. However, the accuracy of the published models is limited due to the fact that they are based on crudely discretised numeric nodes. In traditional Bayesian network tools such discreti...

Safety analysis in gas process facilities is necessary to prevent unwanted events that may cause catastrophic accidents. Accident scenario analysis with probability updating is the key to dynamic safety analysis. Although conventional failure assessment techniques such as fault tree (FT) have been used effectively for this purpose, they suffer severe limitations of static structure and uncertai...

There is an intrinsic risk associated with tunnel construction, particularly in urban areas where a number of third party persons and properties are involved. Due to the limited availability of data for accidents and the complexity associated with their causation, it is therefore necessary to combine available historical data and expert judgment to consider all relevant factors to undertake a r...

Recent major accidents have shown that the human element is not adequately treated in current risk assessments and during facility operations. A novel approach is described which combines barrier based risk assessment (the bow tie risk model) with a nuclear industry approach “Success Pathways” which provides more thorough treatment of human factors and organizational objectives. In operations, ...