/
Risk Scenario worksheets

Risk Scenario worksheets

Owned by foof
Last updated: Jun 07, 2012

As we analyze threats and vulnerabilities, we're likely to complete a series of worksheets to do that work.  This page is where we keep the working versions of those.

Stage 0 -- Risk-scenario worksheet template

The WG is using this worksheet to build each risk-scenario -- so what you see here is an evolving template.  This is a way to see the whole methodology on one page -- a useful introduction/overview document, in addition to being a tool that the WG is using to create "compound sentence" risk-scenarios.   

5-April-2012 -- >  DSSA - Risk Scenarios v4.xls

12-April-2012 -- >  DSSA - Risk Scenarios v5.xls

7-June-2012–>  DSSA - Risk Scenarios v6.xls

Stage 1 -- Risk-scenario worksheets developed and managed by WG members

This section will be used to post the individual risk-scenarios created by members of the working group (so this list is likely to get fairly long).  These are drafts developed and managed  by individual members that may go through a number of revisions before they are "promoted" to Stage 2.

JL1 - Global, massive attack against a day zero vulnerability in DNS software

DSSA - Risk Scenarios --- jl1.xls

JL2 - DNSSEC production/hardware/software/process errors cause invalid signatures

DSSA - Risk Scenarios --- jl2.xls

JS1 - DDOS Attack

DSSA - Risk Scenarios --- JS1.xls

MOC1 - ISOC "Boutique Networks" scenario

DSSA - Risk Scenarios --- moc1.xls

DSSA - Risk Scenarios --- moc1v2.xls

MOC2 - ISOC "Moats and Drawbridges" scenario

DSSA - Risk Scenarios --- moc2.xls

DSSA - Risk Scenarios --- moc2v2.xls

MOC3 - NIPP "Policy, Governance, and Knowledge Failures" alternate-root scenario

DSSA --- Risk Scenarios -- moc3.xls

DSSA - Risk Scenarios -- moc3v2.xls

RM1 - Disgruntled employee  

DSSA - Risk Scenarios --- RM1.xls

DSSA - Risk Scenarios --- RM1v2.xls

RM2 - Combined effect of nation-state blocking policy and configuration error

DSSA - Risk Scenarios --- RM2.xls

DSSA - Risk Scenarios --- RM2v2.xls

RM3 - Combined effect of nation-state alternate root, cyber terrorism and DNS hacking

DSSA - Risk Scenarios --- RM3.xls

DSSA - Risk Scenarios --- RM3v2.xls

RM4 - Combined effect of large-scale outage

DSSA - Risk Scenarios --- RM4.xls

DSSA - Risk Scenarios --- RM4v2.xls

WK1 - Large-scale outage in the US -

DSSA - Risk Scenarios --- wk1.xls

WK2 - Whimsical "Matt at Verisign" scenario (this is a joke, son...  a joke)

DSSA - Risk Scenarios --- wk2.xls

Stage 2 -- Risk-scenario worksheets supported by the DSSA

Risk-scenarios that have been reviewed by the DSSA and for which there is at least rough consensus.

Risk-summary worksheets

These documents are the evolving summary of the risk-scenarios (both those created by DSSA members and ones that are revised by the whole DSSA).  Look at these documents if you want to see summaries the current collection of risk-scenarios we're analyzing.

21-April-2012 --> DSSA - Risk Scenarios --- Summary v2.xls