This page describes and references Risk Management and Risk Analysis approaches.
Our Work
RiskAssessment is a 2009 effort by Daniel Black.
CAcert Threat Model is a 2008 effort by Philipp Güring.
CAcert Root Key Security Risk Analysis (forthcoming) is a 2011-2012 effort by Iang.
Risk/History provides a list of attacks against CAs, for the purpose of validating Threats.