Tableau systems for reasoning about risk

In order to evaluate the effectiveness of the security measures undertaken to protect a distributed system (e.g., protecting privacy of data in a network or in an information system) one should, among other things, perform a risk assessment. In this paper, we introduce a logical framework that allows one to reason about risk by means of operators that formalize causes, effects, preconditions, prevention and mitigation of events that may occur in the system. We give tableau rules and discuss a number of interesting variants that could be considered, prove soundness and completeness for some of the resulting tableau systems, and give an algorithm for satisfiability.