Accession Number:

ADA456882

Title:

Evolutionary Systems Design: Recognizing Changes in Security and Survivability Risks

Descriptive Note:

Final rept.

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST

Personal Author(s):

Report Date:

2006-09-01

Pagination or Media Count:

25.0

Abstract:

A fundamental truth of system design is that in the absence of countermeasures, a systems security and survivability will degrade over time. Changes in the environment or usage of a system, or changes to the elements that compose the system, often introduce new or elevated threats that the system was not designed to handle and is ill-prepared to defend itself against. The first step in evolving to meet new threats to ones systems security and survivability is to recognize the need to modify the system -- that is, to recognize changes in security and survivability risks that trigger the need to enter the evolution phase of the system development life cycle. It is essential that significant risk management resources be devoted to the ongoing evolution of any mission-critical system. The successful evolutionary design of a secure and survivable system is dependent on the continual monitoring of the system and its environment to detect changes that may affect the risk management assumptions on which the systems security and survivability are founded,

Subject Categories:

  • Administration and Management
  • Information Science
  • Computer Programming and Software
  • Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE