Managing risks to valued assets and information can be difficult when history is short and data are scarce. Regardless of the difficulties, decisions must be made on how to reduce the threats to an acceptable level of protection.
CEBRA addresses this by identifying attack paths, which are narratives that describe potential security failures that lead to exploitation or damage of valued assets. These attack paths are then translated into network models.