Software Engineering Institute

Problem: How can we establish trust, manage risk, and mitigate deceptive cyber attacks when decision-making is constrained by limited awareness of vulnerabilities, threats and systems properties.

Proposed Solution: A fundamental model of human actions and the formal machine
properties they affect.