Ideally, a measure of the security of a system should capture quantitatively the intuitive notion of "the ability of the system to resist attack." That is, it should be operational, reflecting the degree to which the system can be expected to remain free of security breaches under particular conditions of operation (including attack). Instead, current security levels at best merely reflect the extensiveness of safeguards introduced during the design and development of a system. Whilst we might expect a system developed to a higher level than another to exhibit "more secure behavior" in operation, this cannot be guaranteed; more particularly, we cannot infer what the actual security behavior will be from knowledge of such a level. In the paper we discuss similarities between reliability and security with the intention of working toward measures of "operational security" similar to those that we have for reliability of systems. Very informally, these measures could involve expressions such as the rate of occurrence of security breaches, or the probability that a specified "mission" can be accomplished without a security breach. This new approach is based on the analogy between system failure and security breach, but it raises several issues which invite empirical investigation. We briefly describe a pilot experiment that we have conducted to judge the feasibility of collecting data to examine these issues.<<ETX>>
[1]
Sarah Brocklehurst,et al.
New Ways to Get Accurate Reliability Measures
,
1992,
IEEE Softw..
[2]
David Wright,et al.
Towards Operational Measures of Computer Security
,
1993,
J. Comput. Secur..
[3]
John D. Musa,et al.
A theory of software reliability and its application
,
1975,
IEEE Transactions on Software Engineering.
[4]
Tomas Olovsson,et al.
Data Collection for Security Fault Forecasting - Pilot Experiment
,
1993
.
[5]
Dave E. Eckhardt,et al.
A Theoretical Basis for the Analysis of Multiversion Software Subject to Coincident Errors
,
1985,
IEEE Transactions on Software Engineering.
[6]
Bev Littlewood,et al.
Conceptual Modeling of Coincident Failures in Multiversion Software
,
1989,
IEEE Trans. Software Eng..
[7]
John D. Musa.
Validity of Execution-Time Theory of Software Reliability
,
1979,
IEEE Transactions on Reliability.