Title Risk Methods and Tools for Identity Management Systems – Deliverable D3.1 in Petweb II（标题风险身份管理系统的方法和工具交付D3.1 Petweb II）.pdfVIP

Risk Methods and Tools for Identity Management Systems Deliverable D3.1 in Petweb II Note no DART/06/13 Author Ebenezer Paintsil Date January 7, 2014 The author Ebenezer Paintsil is currently a researcher at Norwegian Computing Center (NR). He received MSc and LLM from University of Oslo and begun his PhD 2010. He worked on privacy and security risks analysis in identity management systems and was part of the part of the Norwegian Information Security Laboratory (NISlab) at University of Gjovik. Norwegian Computing Center Norsk Regnesentral (Norwegian Computing Center, NR) is a private, independent, non- profit foundation established in 1952. NR carries out contract research and development projects in the areas of information and communication technology and applied statisti- cal modeling. The clients are a broad range of industrial, commercial and public service organizations in the national as well as the international market. Our scientific and tech- nical capabilities are further developed in co-operation with The Research Council of Norway and key customers. The results of our projects may take the form of reports, software, prototypes, and short courses. A proof of the confidence and appreciation our clients have for us is given by the fact that most of our new contracts are signed with previous customers. Title Risk Methods and Tools for Identity Management Systems – Deliverable D3.1 in Petweb II Author Ebenezer Paintsil Quality assurance Wolfgang Leister, Lothar Fritsch Date January 7, 2014 Publication number DART/06/13 Abstract The objective of this report is to test two classic risk analysis methods, namely Mehari and AICPA/CICA, using identity management scenarios in order to determine their suitabil-