Step 3: Calculate critical asset attractiveness

We can now evaluate the attractiveness of the critical assets per adversary (i.e. the ease of causing a threat). Shown as an example, the following table summarizes this information specifying the objective of a potential attack and the Attractiveness Ranking. The attractiveness ranking Lr is function of the criticality of a critical asset and of the adversary hazardousness, It can be expressed as the product of the previous rankings on the interval from 1 to 5, i.e. Lr = (Tr*Ar)/5. The higher the attractiveness will be, the more important the likelihood of an attack on this critical asset will be. The attractiveness combines the motivation and capabilities of the adversary and the criticality and ease of access of the target.

As we can see from the table, the same scenario can have different attractiveness rankings based on the adversary types.