A Risk Assessment Framework to Reduce Risk Level and Optimize Software Quality

Abstract

Risk management for software projects is intended to minimize the chances of unexpected events, or more specifically to keep all possible outcomes under tight management control with making judgments about how risk events are to be treated, valued, compared and combined. It is necessary to have some well-founded infrastructure for the identification of software security risks as well as the application of appropriate controls to manage risks. To be truly beneficial, the risk analysis framework must be granular and practical enough to produce a customizable roadmap of which problems exist, and to rank them in order of severity. The paper a risk assessment framework for a precise, unambiguous and efficient risk analysis with qualitative risk analysis methodologies and tree based techniques by exploiting the synthesis of risk analysis methods with object-oriented modeling, semi-formal methods and tools, in order to improve the security risk analysis of software and security policy implementation of security-critical systems to reduce risk levels and optimize quality instructions.