DMCA
An Experience Modeling Critical Requirements (1994)
| Citations: | 9 - 5 self |
BibTeX
@MISC{Payne94anexperience,
author = {Charles N. Payne and Jr. and Jr. Andrew and Andrew P. Moore and David M. Mihelcic},
title = {An Experience Modeling Critical Requirements},
year = {1994}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Previous work at NRL demonstrated the benefits of a security modeling approach for building high assurance systems for particular application domains. This paper 1 introduces an application domain called selective bypass that is prominent in certain network security solutions. We present a parameterized modeling framework for the domain and then instantiate a confidentiality model for a particular application, called the External COMSEC Adaptor (ECA), within the framework. We conclude with lessons we learned from modeling, implementing and verifying the ECA. Our experience supports the use of the applicationbased security modeling approach for high assurance systems. Introduction Conventional security modeling approaches (c.f., [1]) usually express a system's confidentiality requirements independently of the application that the system must support. Previous work at NRL [10, 11] argued that users understand a system's critical requirements (i.e., the assertions that the system mus...
Keyphrases
experience modeling critical requirement previous work high assurance system confidentiality requirement particular application application domain applicationbased security security modeling approach external comsec adaptor critical requirement introduction conventional security modeling approach selective bypass system mu confidentiality model particular application domain parameterized modeling framework certain network security solution
