value with the input as entered and

value with the input as entered and the output value when one of the input values has been set toone. The Sensitivity metric measures the potential for improvement in that input to result in ameasurable improvement in the total result.To summarize, an MLE threat assessment model consists of a network of decision elements andinputs as defined through the decomposition process. The model is populated with a set of fixedweighting factors and a prescribed data aggregation scheme. Assigning corresponding attributevalues for direct effects (with help from the elicitation guides, e.g., Figure 4) and aggregating thevalues over all the decision elements provides an overall threat assessment score. The resultingassessment score provides a measure of the credibility of that specific threat scenario. Byconsistently following the same analysis scheme, assessment scores calculated for differentthreat scenarios can be compared and ranked to identify the most credible threat. The threatassessment scores range between 0 and 1. A threat assessment score of 1, for example, wouldmean that the system has the highest likelihood of being attacked and the system effectivenessagainst the attack is nonexistent. Conversely, a threat assessment value of 0 means that the system can defeat the threat and the possibility of successful attack is zero.