Security Framework 3: Key System Characteristics Enabling Trustworthiness
IIC:PUB:G4:V1.0:PB:20160926 - 16 -
characteristics have been met. Assurance cases demonstrate to stakeholders that their
expectations for each key system characteristic have been met.
1
An abuse case is a test that provides inappropriate inputs to determine how the system responds.
Abuse cases are similar to use cases in that they make an interaction explicit; they differ in that
the result of the interaction is harmful.
2
Abuse tests that fail are evidence to support the claims.
With appropriate misuse and abuse testing included in the assurance case, the stakeholders can
gain confidence that attackers’ influence has been limited. These cases can be used both for
requirements analysis and testing.
A threat model is a systematic approach to the definition of potentially hazardous events and
malicious attacks to the system. It begins with identifying the most important ways in which
system behavior may be compromised. The types of security violations are then elaborated into
concrete threats, and they may be validated using abuse cases. This top-down approach reveals
other threats so that comprehensive security measures can be developed during system design,
implementation, configuration and maintenance.
3.2 SECURITY
Security is the condition of the system being protected from unintended or unauthorized access,
change or destruction.
The secure behavior of a system is a continuum, not a Boolean state. No IIoT system can behave
securely in every context so the specific contexts deemed relevant must be explicitly stated along
with the secure behavior that the stakeholders expect.
Assurance of security is often assessed in terms of risk. Elements of security risk include a threat
(someone or something that is attempting to do harm), the targeted asset (that has a value), a
potential vulnerability or weakness of the asset that the threat will exploit, and countermeasures
that attempt to reduce the likelihood and impact of any security incidents.
The elements that need be upheld to provide the security of information and system assets are
confidentiality, integrity and availability, often referred to by the acronym CIA.
Confidentiality is the property that information is not made available or disclosed to unauthorized
individuals, entities or processes. Breaches of confidentiality can occur by word of mouth,
printing, copying, emailing, or through software vulnerabilities that allow attackers to read or
exfiltrate data. Data exfiltration is the unauthorized transfer of data read through exploits at
another location under the control of the attacker. This data may be used for blackmailing or
other purposes. Confidentiality controls include access control and encryption technologies.
Integrity ensures that improper information modification or destruction is guarded against.
Integrity controls include hashes, checksums, anti-virus functionality, whitelisting and code
signing that ensure there have been no changes to the system, code and elements controlling
1
See [NIST-7608]
2
See [McDer1999]
剩余172页未读，继续阅读
weixin_44061646
- 粉丝: 0
- 资源: 3
我的内容管理
展开
最新资源
- 李兴华Java基础教程：从入门到精通
- U盘与硬盘启动安装教程：从菜鸟到专家
- C++面试宝典：动态内存管理与继承解析
- C++ STL源码深度解析：专家级剖析与关键技术
- C/C++调用DOS命令实战指南
- 神经网络补偿的多传感器航迹融合技术
- GIS中的大地坐标系与椭球体解析
- 海思Hi3515 H.264编解码处理器用户手册
- Oracle基础练习题与解答
- 谷歌地球3D建筑筛选新流程详解
- CFO与CIO携手：数据管理与企业增值的战略
- Eclipse IDE基础教程：从入门到精通
- Shell脚本专家宝典：全面学习与资源指南
- Tomcat安装指南：附带JDK配置步骤
- NA3003A电子水准仪数据格式解析与转换研究
- 自动化专业英语词汇精华：必备术语集锦
资源上传下载、课程学习等过程中有任何疑问或建议，欢迎提出宝贵意见哦~我们会及时处理！
点击此处反馈
