Model of the Product Development Lifecycle.
- Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)
While the increased use of Commercial Off-The-Shelf information technology equipment has presented opportunities for improved cost effectiveness and flexibility, the corresponding loss of control over the product's development creates unique vulnerabilities and security concerns. Of particular interest is the possibility of a supply chain attack. A comprehensive model for the lifecycle of hardware and software products is proposed based on a survey of existing literature from academic, government, and industry sources. Seven major lifecycle stages are identified and defined: (1) Requirements, (2) Design, (3) Manufacturing for hardware and Development for software, (4) Testing, (5) Distribution, (6) Use and Maintenance, and (7) Disposal. The model is then applied to examine the risk of attacks at various stages of the lifecycle.
- Research Organization:
- Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
- Sponsoring Organization:
- USDOE; DHS NPPD
- DOE Contract Number:
- AC04-94AL85000
- OSTI ID:
- 1226426
- Report Number(s):
- SAND2015--9022; 608152
- Country of Publication:
- United States
- Language:
- English
Similar Records
Towards a New Supply Chain Cybersecurity Risk Analysis Technique
The Nuclear Digital I&C System Supply Chain Cyber-Attack Surface
Technical Report
·
Sun Aug 01 00:00:00 EDT 2021
·
OSTI ID:1877401
The Nuclear Digital I&C System Supply Chain Cyber-Attack Surface
Conference
·
Mon Jun 08 00:00:00 EDT 2020
·
OSTI ID:1634821