The DREAD model quantitatively evaluates the seriousness of a cyber attack utilizing a scaled rating framework that assigns numerical values to risk categories.
The DREAD model has five categories:
Damage: Understand the potential damage a particular threat is capable of causing.
Reproducibility: Identify how easy it is to replicate an attack.
Exploitability: Analyze the system’s vulnerabilities to ascertain susceptibility to cyberattacks.
Affected Users: Calculate how many users would be affected by a cyberattack.
Discoverability: Determine how easy it is to discover vulnerable points in the system infrastructure.