Resource allocation decisions can be enhanced by performing risk assessment during the early development phase. In … order to improve and maintain the security of the Information System (IS, hereafter), there is need to build risk analysis …-based risk analysis system (ARAS) which gathers identified threats events, probe them and correlates those using ontologies. It …