Information surety for today and tomorrow
- Sandia National Labs., Albuquerque, NM (United States). Information Surety Dept.
Information Surety is the enhancement of the confidentiality, integrity, and availability of information and software systems. It is attained through sequential steps: identification of software reliability requirements and information protection needs, designing for a balanced level of risk throughout the system, and application of appropriate software and hardware technologies and procedures. The ability to apply these steps when developing systems is impaired by a general lack of understanding of surety issues by system developers, and by the fact that there are many separate areas of knowledge involved that are not currently integrated into a disciplined approach (e.g., risk assessment, information access control in computers and networks, secure messaging, trusted software development). The best systems today are achieved by clever designers who use ad-hoc methods. In the absence of good development tools, technologies may be applied haphazardly and/or retrofitted, without yielding balanced protection. This paper will take the audience through an exploration of the elements of information surety, some common misconceptions about information surety today, and the even greater challenges on the horizon. It will end with some suggestions for research areas which will help evolve the discipline of information surety.
- OSTI ID:
- 61293
- Report Number(s):
- CONF-930749--
- Country of Publication:
- United States
- Language:
- English
Similar Records
Risk-based assessment of the surety of information systems
Toward a risk-based approach to the assessment of the surety of information systems