Skip to main content
U.S. Department of Energy
Office of Scientific and Technical Information

Model of the Product Development Lifecycle.

Technical Report ·
DOI:https://doi.org/10.2172/1226426· OSTI ID:1226426
While the increased use of Commercial Off-The-Shelf information technology equipment has presented opportunities for improved cost effectiveness and flexibility, the corresponding loss of control over the product's development creates unique vulnerabilities and security concerns. Of particular interest is the possibility of a supply chain attack. A comprehensive model for the lifecycle of hardware and software products is proposed based on a survey of existing literature from academic, government, and industry sources. Seven major lifecycle stages are identified and defined: (1) Requirements, (2) Design, (3) Manufacturing for hardware and Development for software, (4) Testing, (5) Distribution, (6) Use and Maintenance, and (7) Disposal. The model is then applied to examine the risk of attacks at various stages of the lifecycle.
Research Organization:
Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
Sponsoring Organization:
USDOE; DHS NPPD
DOE Contract Number:
AC04-94AL85000
OSTI ID:
1226426
Report Number(s):
SAND2015--9022; 608152
Country of Publication:
United States
Language:
English

Similar Records

Towards a New Supply Chain Cybersecurity Risk Analysis Technique
Technical Report · Sun Aug 01 00:00:00 EDT 2021 · OSTI ID:1877401

The Nuclear Digital I&C System Supply Chain Cyber-Attack Surface
Conference · Mon Jun 08 00:00:00 EDT 2020 · OSTI ID:1634821

Related Subjects