Flaw Hypothesis Methodology
- A system analysis and penetration technique where specifications and documentation for the system are analyzed and then flaws in the system are hypothesized. The list of hypothesized flaws is then prioritized on the basis of the estimated probability that a flaw actually exists and, assuming a flaw does exist, on theease of exploiting it on the extent of control or compromise it would provide. The prioritized list is used to direct the actual testing of the system. (CSC-STD-001-83;; NCSC-WA-001-85;)