In each of the following cases, Alice calls on you, as a computer systems security specialist, to help her carry out a risk analysis.

1. Alice has developed a website that she hosts at an Internet service provider. Elley files documents for a very profitable project to allow his friend Bob, with whom he is working on the same project, to download them. The security objective is to ensure the confidentiality of the project documents, especially that we should not give someone else the chance to see Alice and Bob's project.

2 Alice shares her desk with two colleagues jealous of his professional success. The security goal is confidentiality.

3 Alice is a lawyer. She hired a secretary who writes and / or prints all correspondence and her working documents. The security goal in this case is integrity.

4. Alice brings her laptop to a nearby cafe with free access to a wireless Internet connection (Wi-Fi). She uses protocoletelnet (which transmits data in clear, i.e., without encryption) to connect to her Linux machine left at home. The security goal is password confidentiality.

5 Alice is traveling in the South. She goes to a nearby internet cafe to read her emails and check her academic results at UdeM. The security objective is the confidentiality of the password. The different scenarios are independent. To calculate the probability, it will be necessary to take the median value of capacity, opportunity and motivation.

For each case, the work to be done consists of:

a.Identifying threats.

b.Defining a risk scenario.

c.Dressing a risk analysis table with in particular an assessment of the following components: Capacity, Opportunity, Motivation, Probability and Impact

d.Graphically represent the risk scenarios in a LOG scale.

e Develop a brief interpretation of the results of your risk analysis.

F. Give recommendations to Alice.