Quantitative Security Assurance

View Sample PDF

Author(s): Basel Katt (Norwegian University of Science and Technology, Norway)and Nishu Prasher (Statistics Norway, Norway)
Copyright: 2019
Pages: 32
Source title: Exploring Security in Software Architecture and Design
Source Author(s)/Editor(s): Michael Felderer (University of Innsbruck, Austria)and Riccardo Scandariato (Chalmers University of Technology, Sweden & University of Gothenburg, Sweden)
DOI: 10.4018/978-1-5225-6313-6.ch002

Keywords: Computer Science & IT / Information Science Reference / IT Security and Ethics / Systems & Software Design

Purchase

View Quantitative Security Assurance on the publisher's website for pricing and purchasing information.

Abstract

Security assurance is the confidence that a system meets its security requirements and is resilient against security vulnerabilities and failures. Existing approaches can be characterized as (1) qualitative in nature, (2) tend to achieve their goals manually to a large extent, (3) very costly, (4) development-process oriented, and finally, (3) treat all security requirements within one domain equally for all applications regardless of the context. In this chapter, the authors propose a security assurance framework and its assurance evaluation process. The framework and process depend on a quantitative security assurance metrics that were developed too. The proposed metric considers both the security requirements and vulnerability. Weight has been introduced to the security requirement metric to measure the importance of security requirements that need to be fulfilled. The framework with the proposed quantitative assurance metrics are evaluated and validated using two field case studies related to two operational REST APIs that belong to and are used by Statistics Norway.

The IRMA Community

Research IRM

Quantitative Security Assurance

Purchase

Abstract

Related Content

IRMA Sponsors