eTVRA, a Threat, Vulnerability and Risk Assessment Tool for eEurope

• Published in: Lecture notes in computer science pp. 467 - 471
• Main Authors: Rossebø, Judith E. Y., Cadzow, Scott, Sijben, Paul
• Format: Book Chapter Conference Proceeding
• Language: English
• Published: Berlin, Heidelberg Springer Berlin Heidelberg 2006; Springer
• Series: Lecture Notes in Computer Science
• Subjects: Acoustics; Applied sciences; Communication Denial; Computer science; control theory; systems; Computer systems and distributed systems. User interface; Exact sciences and technology; Fundamental areas of phenomenology (including applications); International Standard Organization; Memory and file management (including protection and security); Memory organisation. Data processing; Physics; Risk Assessment Tool; Service Availability; Session Initiation Protocol; Software; Transduction; acoustical devices for the generation and reproduction of sound; Internet protocol; Transmission protocol; Voiced signal; Telecommunication; Electronic countermeasure; Vulnerability; Distributed system; Risk analysis; Civil service; Social psychology; Confidence; Risk assessment; Contract; Computer security; Voice
• ISBN: 9783540342953; 3540342958
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/11755593_38

Securing the evolving telecommunications environment and establishing trust in its services and infrastructure is crucial for enabling the development of modern public services. The security of the underlying network and services environment for eBusiness is addressed as a crucial area in the eEurope action plan [2]. In response to this Specialist Task Force (STF) 292 associated with the European Telecommunication Standardisation Institute (ETSI) TISPAN [3] under contract from eEurope, has developed a threat, vulnerability and risk assessment (eTVRA) method and tool for use in standardisation. Using the eTVRA method and tool, the threats to a next generation network (NGN) can be analyzed and a set of recommended countermeasures identified that when implemented will reduce the overall risk to users of NGNs. In this paper we present the eTVRA method and tool along with the results of using the eTVRA for an analysis of a Voice over IP (VoIP) scenario of the NGN.