Attributes of Securable Architectures

Technical Report · Mon Jun 01 04:00:00 EDT 2015

DOI:https://doi.org/10.2172/1494347· OSTI ID:1494347

Lamb, Christopher C. ^[1]; Hatcher, Jesse P. ^[1]

---

1. Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)

As cyber-security is becoming more and more important in systems development, engineers have begun to recognize and understand the types of errors they can introduce through hurried coding technique and design. This overall trend is certainly moving the software industry in the right direction and can lead to developing higher quality software-centric systems. Unfortunately, we have barely begun to examine the results of poor architectural choices, nor do we have much insight into what secure and securable architectures look like. In this paper, based on the past 40 years of work identifying specific security principles, we create a taxonomy of principles that address the abstract cyber-security needs of systems. We then tie these principles to studies of insecure systems architectures to demonstrate applicability. We close the paper with a description of other cyber-security taxonomies, how they specifically differ from this presented taxonomy, and add new principles to address gaps shown in taxonomic comparisons.

• Research Organization: Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
• Sponsoring Organization: USDOE National Nuclear Security Administration (NNSA); DOD
• DOE Contract Number: AC04-94AL85000
• OSTI ID: 1494347
• Report Number(s): SAND--2015-7014; 672300
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING