Towards improving software security by using simulation to inform requirements and conceptual design

Journal Article · Wed Jun 17 00:00:00 EDT 2015 · Journal of Defense Modeling and Simulation

DOI: https://doi.org/10.1177/1548512915591049 · OSTI ID:1223064

Nutaro, James J. ^[1]; Allgood, Glenn O. ^[1]; Kuruganti, Teja ^[1]

---

1. Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)

We illustrate the use of modeling and simulation early in the system life-cycle to improve security and reduce costs. The models that we develop for this illustration are inspired by problems in reliability analysis and supervisory control, for which similar models are used to quantify failure probabilities and rates. In the context of security, we propose that models of this general type can be used to understand trades between risk and cost while writing system requirements and during conceptual design, and thereby significantly reduce the need for expensive security corrections after a system enters operation

• Research Organization: Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
• Sponsoring Organization: USDOE
• Grant/Contract Number: AC05-00OR22725
• OSTI ID: 1223064
• Journal Information: Journal of Defense Modeling and Simulation, Journal Name: Journal of Defense Modeling and Simulation Vol. 12; ISSN 1548-5129
• Publisher: Society for Modeling and Simulation InternationalCopyright Statement
• Country of Publication: United States
• Language: English