An integrated framework for security and dependability

Abstract

This paper deals with the problem of interpreting security and dependability in such a way that they can be incorporated into the same framework. This calls for a modified understanding of some of the traditional concepts. Thus, a system-related conceptual model is suggested in which the various aspects of security and dependability are analyzed and regrouped into a new "input-output"-related system model. The input characteristics of this new model are interpreted in preventive terms, whereas the output characteristics are interpreted in behavioural terms with respect to the user of the system. One of the benefits of the model is that it can form a basis for composite measures of security and dependability. Thus, it is possible to define preventive measures and behavioural measures. The behavioural measures are measures that relate to the behaviour of the system, or, put informally, relate to the "output" of the system. Behavioural measures deal with system failures, e.g., the probability for and magnitude of such failures. Well-known reliability methods, such as Markov modelling, can be used for deriving behavioural measures of security. A preventive measure, on the other hand, would describe the system's ability to avoid detrimental influence from the environment, in particular influence originating from security breaches into the system.

Security Requirements Engineering: A Framework for Representation and Analysis

“…However, they are not identical. We and other authors consider one difference between security and safety to be intention (e.g., [26], [43], [52]). Safety concerns harm caused by accident, while security concerns harm caused by an attacker.…”

Seamless integration of dependability and security concepts in SOA: A feedback control system based framework and taxonomy

“…Avizienis et al (2004) and Jonsson (1998) proposed a system view to integrate dependability and security. They tried to use the system function and behaviour to form a framework.…”

MoPED: A Model-Based Provisioning Engine for Dependability in Component-Based Distributed Real-Time Embedded Systems

“…A common feature between these standard UML profiles and the modeling language of MoPED is the first class support for QoS concerns and a QoS modeling framework built around it. Our QoS modeling framework differs from that of Early efforts on integrating security with availability and reliability were toward developing a unified terminology [10] to describe systems using an extended meaning of definitions of dependability attributes. A systemic conceptual model is suggested in which various aspects of security and dependability are discussed.…”