The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.

Use of any trademarks in this report is not intended in any way to infringe on the rights of the trademark holder. Internal use. Permission to reproduce this document and to prepare derivative works from this document for internal use is granted, provided the copyright and "No Warranty" statements are included with all reproductions and derivative works.

No abstract

Survivability is receiving increasing attention as a key property of critical systems. Survivability is the capability of a system to fulfill its mission, in a timely manner, in the presence of attacks, failures, or accidents. We present a method for analyzing survivability of distributed network systems and an example of its application. Survivability requires system capabilities for intrusion resistance, recognition, and recovery. The Survivable Network Analysis (SNA) method permits assessment of survivability at the architecture level. Steps in the method include system mission and architecture definition, essential capability definition, compromisable capability definition, and survivability analysis of architectural softspots that are both essential and compromisable. Intrusion scenarios play a key role in the analysis. SNA results are summarized in a Survivability Map that links recommended survivability strategies to the system architecture. The case study summarizes application of the SNA method to a subsystem of a large-scale, distributed healthcare system.

No abstract

No abstract

No abstract

No abstract