skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Towards improving software security by using simulation to inform requirements and conceptual design

Journal Article · · Journal of Defense Modeling and Simulation
 [1];  [1];  [1]
  1. Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)

We illustrate the use of modeling and simulation early in the system life-cycle to improve security and reduce costs. The models that we develop for this illustration are inspired by problems in reliability analysis and supervisory control, for which similar models are used to quantify failure probabilities and rates. In the context of security, we propose that models of this general type can be used to understand trades between risk and cost while writing system requirements and during conceptual design, and thereby significantly reduce the need for expensive security corrections after a system enters operation

Research Organization:
Oak Ridge National Laboratory (ORNL), Oak Ridge, TN (United States)
Sponsoring Organization:
USDOE
Grant/Contract Number:
AC05-00OR22725
OSTI ID:
1223064
Journal Information:
Journal of Defense Modeling and Simulation, Vol. 12; ISSN 1548-5129
Publisher:
Society for Modeling and Simulation InternationalCopyright Statement
Country of Publication:
United States
Language:
English

References (4)

Secure it now or secure it later: the benefits of addressing cyber-security from the outset conference May 2013
Resilience metrics for cyber systems journal November 2013
Closed-form expressions for distribution of sum of exponential random variables journal January 1997
Cybersecurity Standards: Managing Risk and Creating Resilience journal September 2014