As we analyze threats and vulnerabilities, we're likely to complete a series of worksheets to do that work. This page is where we keep the working versions of those.
Stage 0 -- Risk-scenario worksheet template
The WG is using this worksheet to build each risk-scenario -- so what you see here is an evolving template. This is a way to see the whole methodology on one page -- a useful introduction/overview document, in addition to being a tool that the WG is using to create "compound sentence" risk-scenarios.
5-April-2012 -- > DSSA - Risk Scenarios v4.xls
12-April-2012 -- > DSSA - Risk Scenarios v5.xls
Stage 1 -- Risk-scenario worksheets developed and managed by WG members
This section will be used to post the individual risk-scenarios created by members of the working group (so this list is likely to get fairly long). These are drafts developed and managed by individual members that may go through a number of revisions before they are "promoted" to Stage 2.
JS1 - DDOS Attack --> DSSA - Risk Scenarios --- JS1.xls
MOC1 - ISOC "Boutique Networks" scenario -- DSSA - Risk Scenarios --- moc1.xls
MOC2 - ISOC "Moats and Drawbridges" scenario -- DSSA - Risk Scenarios --- moc2.xls
MOC3 - NIPP "Policy, Governance, and Knowledge Failures" alternate-root scenario -- DSSA --- Risk Scenarios -- moc3.xls
RM1 - Disgruntled employee --> DSSA - Risk Scenarios --- RM1.xls
RM2 - Combined effect of nation-state blocking policy and configuration error --> DSSA - Risk Scenarios --- RM2.xls
RM3 - Combined effect of nation-state alternate root, cyber terrorism and DNS hacking --> DSSA - Risk Scenarios --- RM3.xls
RM4 - Combined effect of large-scale outage --> DSSA - Risk Scenarios --- RM4.xls
WK1 - Large-scale outage in the US --> DSSA - Risk Scenarios --- wk1.xls
WK2 - Whimsical "Matt at Verisign" scenario (this is a joke, son... a joke) --> DSSA - Risk Scenarios --- wk2.xls
Stage 2 -- Risk-scenario worksheets supported by the DSSA
Risk-scenarios that have been reviewed by the DSSA and for which there is at least rough consensus.
Risk-summary worksheets
There's nothing in here yet, but these documents will be the evolving summary of the risk-scenarios (both those created by DSSA members and ones that are revised by the whole DSSA). Look at these documents if you want to see summaries the current collection of risk-scenarios we're analyzing.
OLD Ranking worksheets -- Threats and vulnerabilities
(these should really be moved out of this section of the wiki -- but it's good to see how far we've come since these were created back in late 2011)
DSSA -- Threats -- Ranking v1.xls