Abstract
Hadarics et. al. gave a Mathematical Model for Distributed Vulnerability Assessment. In this model the extent of vulnerability of a specific company IT infrastructure is measured by the probability of at least one successful malware attack when the users behaviour is also incorporated into the model. The different attacks are taken as independent random experiments and the probability is calculated accordingly. The model uses some input probabilities related to the characteristics of the different threats, protections and user behaviours which are estimated by the corresponding relative frequencies. In this paper this model is further detailed, improved and a numerical example is also presented.