8000 Representing risk on nodes/edges · Issue #3 · jimmythompson/ent · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Representing risk on nodes/edges #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up f 8000 or GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
jimmythompson opened this issue Jun 3, 2015 · 1 comment
Open

Representing risk on nodes/edges #3

jimmythompson opened this issue Jun 3, 2015 · 1 comment
Milestone
v1.0

Comments

@jimmythompson
Copy link
Owner

I would like to be able to represent values for likelihood and impact against each edge node, and to be able to prune the tree at appropriate thresholds. - @jgumbley

The idea of risk is something the tree should be able to represent. Whether we define risk as likelihood and impact, like in Jim's quote, or something else. I've described it as risk since that seems to be a decent abstract term for it, value would be also acceptable.
@jimmythompson
Copy link
Owner Author

I have a few questions regarding how this should work, and some suggestions for each of them.

How does the user input risk into the text editor?
I have no idea what a good suggestion for this would be. Are we looking at a single number (risky between 1 and 10) or do we want to keep likelihood and impact separate?

How does risk appear on the tree?
I'm liking the idea of a relative heat map on each of the nodes, so the more red a node is, the more risk it has. However, this would mean we prescribe a single idea of what risk is, whether it's adding impact and likelihood, or the product. If we don't want to do that I don't see how we can represent them other than just drawing them on each node.

How does risk of a child node affect its parent?
This is an interesting discussion on its own, especially as we deal with AND vs. OR junctions. If a parent threat is the sum of all of its children, is the parent as risky as the riskiest child? Or is the risk of the parent the sum of all potential risks of the child?

@jimmythompson jimmythompson modified the milestone: v1.0 Jun 27, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
v1.0
Development

No branches or pull requests
1 participant
@jimmythompson
0