Risk and Trust

Question 1

Definitions Asset Threat:

Answer 1

Asset: What we want to protect
Threat: Harm that can happen to an asset
Attack: A threatening event
Attacker: The agent causing an attack (not necessarily human)
Vulnerability: A weakness in the system that makes an attack more likely to succeed
Risk: A quantified measure of the likelihood of a threat being realised
Impact: A measure of the seriousness of a threat

Question 2

Risk analysis problems

Answer 2

Cant know all threats and vulnerability probabilities

Question 3

Impact evaluation

Answer 3

Identify threats for all assets, identify impact of thread on 1-10 scale, qualitative scales work better

Question 4

Risk handling

Answer 4

Ignore it, Remove it completely by withdrawing, implement counter measures(can introduce new risks)

Question 5

Human risk biases

Answer 5

Underestimate or ignore: Risks that havent happened or small risks
Overestimate: Recent risk, vivid but rare events
Lean towards inaction in cases

Question 6

Illusion of Certainty, Thermostat

Answer 6

Known Risks are assumed to be prevented, thinking risk can be calculated
Thermostat: When risk taking rewarded without problem => more risk taking
Comfort Zone: Prefer risks we understand

Question 7

Risk compensation

Answer 7

Risk taking is increased after introducing measures to reduce risk

Question 7

3 types of risks

Answer 7

Through science: Viral infections
Virtual risk: Anything without scientific consensus
Experienced directly: Climbing tree and falling down

Question 8

Trust Requirments

Answer 8

Trust only required in situations of risk and uncertainty, scan for trust signs (lock, social media signs

Question 9

Trust vs Reliance

Answer 9

At the start: Trust, After multiple succesful interactions: Reliance

Question 10

Symbols vs Symptoms

Answer 10

Symbol: Badge or Seal which shows trustability
Symptom: Signals giving of by trustee

Question 11

Reputations system problems

Answer 11

Attackers may subvert them, Trustors dont get reward for feedback, Reputation may become hostage for trustors

Question 12

Trust in organizations

Answer 12

Not trusting damages productivity, disables positive behavior and is often unrealistic
=> Start from position of trust and if threat is to big ensure that its not personal

Question 13

Trust halo and horns

Answer 13

Positive Experience => Trust into other products
Negative Experience => No trust in other products
Hard to win trust and easy to lose