The goal of the experiment is to investigate which type of risk model is more comprehensible. See the main page for our work on empirical validation of security risk assessment methods and other experiments.

Here are the materials that we distributed among participants depending on the treatment to which they were assigned:

• Tutorial on the risk modeling notations and application scenarios PDF.
• HCN tabular risk model XLSX.
• HCN graphical risk model PDF.

• Tutorial on the risk modeling notations and application scenarios PDF.
• Online Banking scenario description PDF.
• Online Banking tabular risk model PDF.
• Online Banking graphical risk model PDF.
• HCN scenario description PDF.
• HCN tabular risk model PDF.
• HCN graphical risk model PDF.