diff --git a/README.md b/README.md index 196bc9c..df951f9 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,7 @@ generic cases, we wanted to create a risk evaluation which is based on current e Threats Risk Index = (Threat probability) * (1+SUM(recommendations not implemented)) ~~~~ -hreats +Threats ======= Threats file is a list of known and seen threats in a specific region by a CSIRT or any organization with the capability of analysis for security incidents. The threat is defined by a simple description and id. Probability values are assigned per region (country-code) and defined on the overall probability of an incident to occur among the overall set of incidents seen. The probability value is a float (from 0 to 1). As the probability depends on the organization doing the analysis, it could be really scoped to their view on threats. Multiple threats and their respective probability can be combined from various sources in a sum. If a threat is no more seen or actively exploited by an attacker, it should be removed from the list.