Can we ever build survivable systems from COTS components?

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2348, Issue , 2002, Pages 216-229

  Lipson, Howard F ^a   Mead, Nancy R ^a   Moore, Andrew P ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION SYSTEMS; RISK MANAGEMENT; SYSTEMS ENGINEERING;

COMMERCIAL OFF-THE-SHELF COMPONENTS; COTS-BASED SYSTEMS; ECONOMIC DAMAGES; MANAGEMENT SKILLS; MISSION CRITICAL APPLICATIONS; RISK MITIGATION; SURVIVABLE SYSTEMS; SYSTEM FAILURES;

SOFTWARE PACKAGES;

EID: 33751076512     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: None     Document Type: Conference Paper

References (12)

1. R. Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems, pages 527–529. John Wiley & Sons, 2001.
2. V. R. Basili and B. Boehm. COTS-based systems top 10 list. IEEE Software, 34(5):91–93, May 2001.
3. L. Brownsword, P. Oberndorf, and C. Sledge. An activity framework for COTSbased systems. Crosstalk: The Journal of Defense Software Engineering, 13(9), September 2000.
4. Common Criteria Implementation Board. Common Criteria for Information Technology Security Evaluation, Version 2.1. Number CCIMB-99-031. August 1999. See: http://csrc.ncsl.nist.gov/cc/.
5. C. Cowan, P. Wagle, C. Pu, S. Beattie, and J. Walpole. Buffer overflows: Attacks and defenses for the vulnerability of the decade. In DARPA Information Survivability Conference and Expo (DISCEX), Hilton Head, SC, January 2000. IEEE Computer Society.
6. R. J. Ellison, D. A. Fisher, R. C. Linger, H. F. Lipson, T. A. Longstaff, and N. R. Mead. Survivable systems: An emerging discipline. In Proceedings of the 11th Canadian Information Technology Security Symposium (CITSS’99), Ottawa, Ontario, May 1999. Communications Security Establishment, Government of Canada. See: http://www.cert.org/research/ for additionalp apers on this topic.
7. J. Froscher and M. Kang. A client-server architecture supporting MLS interoperability with COTS components. In Proc. MILCOM 97, Monterey, CA, November 1997.
8. S. A. Hissam, D. Carney, and D. Plakosh. DoD Security Needs and COTS-Based Systems. SEI Monographs on the Use of CommercialS oftware in Government Systems. Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, September 1998. See: http://www.sei.cmu.edu/cbs/papers/monographs/dodsecurity-needs.htm.
9. R. Kazman, M. Klein, M. Barbacci, T. Longstaff, H. F. Lipson, and S. J. Carriere. The architecture tradeoff analysis method. In Proceedings of the IEEE International Conference on Engineering of Complex Computer Systems, Monterey, CA, August 1998. IEEE Computer Society. See: http://www.sei.cmu.edu/ata/ for additionalp apers on this topic.
10. U. Lindqvist and E. Johnson. A map of security risks associated with using COTS. IEEE Computer, pages 60–66, June 1998.
11. H. Lipson and D. Fisher. Survivability – A new technical and business perspective on security. In Proceedings of the New Security Paradigms Workshop. ACM, September 1999.
12. N. R. Mead, H. F. Lipson, and C. A. Sledge. Towards survivable COTS-based systems. Cutter IT Journal, 14(2):4–11, February 2001.