What is DREAD?

DREAD is a risk assessment model used to categorize security threats against computer systems. The acronym stands for Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability. Each category is rated (typically on a scale of 0-10 or 1-5), and these ratings are summed or averaged to provide an overall risk score. The higher the score, the greater the risk. It's commonly used to prioritize security efforts and guide decision-making about which vulnerabilities to address first.