What Then Do We Do About Computer Security?

Technical Report · Sun Jan 01 00:00:00 EST 2012

DOI:https://doi.org/10.2172/1035331· OSTI ID:1035331

Berg, Michael J. ^[1]; Davis, Christopher Edward ^[1]; Mayo, Jackson R. ^[1]; Suppona, Roger A. ^[1]; Wyss, Gregory Dane ^[1]

---

1. Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)

This report presents the answers that an informal and unfunded group at SNL provided for questions concerning computer security posed by Jim Gosler, Sandia Fellow (00002). The primary purpose of this report is to record our current answers; hopefully those answers will turn out to be answers indeed. The group was formed in November 2010. In November 2010 Jim Gosler, Sandia Fellow, asked several of us several pointed questions about computer security metrics. Never mind that some of the best minds in the field have been trying to crack this nut without success for decades. Jim asked Campbell to lead an informal and unfunded group to answer the questions. With time Jim invited several more Sandians to join in. We met a number of times both with Jim and without him. At Jim's direction we contacted a number of people outside Sandia who Jim thought could help. For example, we interacted with IBM's T.J. Watson Research Center and held a one-day, videoconference workshop with them on the questions.

• Research Organization: Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
• Sponsoring Organization: USDOE National Nuclear Security Administration (NNSA)
• DOE Contract Number: AC04-94AL85000
• OSTI ID: 1035331
• Report Number(s): SAND--2012-0640
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING
COMPUTERS
METRICS
SECURITY