Fault trees for security system design and analysis

Brooke, Phillip J.; Paige, Richard F.

doi:10.1016/s0167-4048(03)00313-4

Cited by 73 publications

(43 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The two basic gate categories are the AND-gate and the OR-gate. Nowadays, it is possible to find a large offer of software tools to generate automatically fault trees, to find minimal cut sets and to calculate failure probabilities (Brooke, 2003). As our objective is to find out systematic faults of controller, failure probabilities computation will not be considered in what follows.…”

Section: Fault Tree Fundamentalsmentioning

confidence: 99%

From Fault Tree Analysis to Model Checking of Logic Controllers

Santiago

Faure

2005

IFAC Proceedings Volumes

View full text Add to dashboard Cite

This paper proposes a method enabling to state formal properties of a logic controller, a prerequisite for formal verification using model-checking, from a fault-tree analysis taking into account both the controlled process and the controller. Invariants, untimed and timed properties are considered and illustrated thanks to an example. The aim of this method is to ease formal properties design and to bridge the gap between fault forecasting and fault removal for automated systems.

show abstract

Section: Fault Tree Fundamentalsmentioning

confidence: 99%

From Fault Tree Analysis to Model Checking of Logic Controllers

Santiago

Faure

2005

IFAC Proceedings Volumes

View full text Add to dashboard Cite

show abstract

“…The catalog will contain links to a broad range of information about best practices, tools, and knowledge. Figure identifies aspects of software assurance covered in the catalog [9]. The BSI portal includes information about which tools developers and security analysts can use to detect and/or remove common vulnerabilities.…”

Section: Introductionmentioning

confidence: 99%

Performance Evaluation and Operation of Enterprise Resource Planning (ERP) Software Security System

Paul

Mridha²,

Hasan³

2014

IJIIS

View full text Add to dashboard Cite

Abstract:The criteria for selecting the specific systems are -containment of most common sources for attacks, knowledge of the exact location of each security hole, accessibility to the source code and selection of a typical web application such as a human resource management. We followed the human resource (recruiting and working procedure) to integrate all the facilities in a single programmable platform. The applied framework has been used to map a commercial security library to the target mobile application SoC (System-of-Chip). The applicability of our framework to software architecture has been explored in other multiprocessor scenarios. ERP software (or enterprise resource planning software) is an integrated system used by businesses to combine, organize and maintain the data necessary for operations. The fundamental advantage of ERP is that integrating the myriad processes by which businesses operate saves time and expenses. The whole process has been automated using a methodology that extracts the risk of ERP system by analyzing the class diagram of the system. ERP for the business to develop innovative services for new and existing organizations, has achieved operational excellence with streamlined logistics and manufacturing improve financial performance with tighter internal controls and insights connect headquarters, subsidiaries and partners in a single network. Any type of small and large organization who to maintain their work flow in an organized way and having an intensity of clear book keeping like as business & educational institutions as well as social organizations.

show abstract

“…Recently, applications of FTA to analysis on failures and security of information systems are reported. In [15], design analysis of security-critical systems utilizing FTA is discussed.…”

Section: Fault Trees For Security System Design and Analysismentioning

confidence: 99%

“…Thus construction of fault trees is important. In [15], it is pointed out that distinction of a system and components, and refinement of diversified security concerns are important issues.…”

Section: Fault Trees For Security System Design and Analysismentioning

confidence: 99%

“…Extended RBAC models have been compared with existing ones by qualitative analysis or by evaluation on a particular implementation [9]. In this paper, we propose a systematic and qualitative risk evaluation method for RBAC models, consisting of the following elements: (1) Common fault trees [14] [15] are constructed based on the core functions of RBAC, augmented with functions for enterprise-level RBAC, and risk events obtained from past accidents and incidents [11][12]13]. (2) Subtrees necessary for evaluation are selected from the common fault trees systematically constructed at (1), and logic programs are generated from the AND-OR constructs of the fault trees.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Extending RBAC for Large Enterprises and Its Quantitative Risk Evaluation

Kondo

Iwaihara

Yoshikawa

et al.

Towards Sustainable Society on Ubiquitous Networks

View full text Add to dashboard Cite

Abstract. Systems and security products based on the RBAC model have been widely introduced to enterprises. Especially, the demands on enforcement of enterprise-level security policies and total identity management are rapidly growing. The RBAC model needs to be extended to deal with various circumstances of large enterprises, such as geographical distribution and heterogeneous environments including physical access control. In this paper, we introduce a new RBAC model, suitable for single sign-on systems. This model optimizes evaluation of rule-based RBAC so that total operation costs and productivity can be improved.Furthermore, to select most cost-effective RBAC extensions for enterprise-wide requirements, we propose a quantitative risk evaluation method based on fault trees. We construct fault trees having security violation and productivity loss as top events, and RBAC standard functions and security incidents as basic events. Probabilities of the top events are computed for given RBAC models and operation environments. We apply this method to a real enterprise system using the above RBAC extension and the proposed model realizes more safety and productivity over the base model. Please use the following format when citing this chapter:

show abstract

Fault trees for security system design and analysis

Cited by 73 publications

References 8 publications

From Fault Tree Analysis to Model Checking of Logic Controllers

From Fault Tree Analysis to Model Checking of Logic Controllers

Performance Evaluation and Operation of Enterprise Resource Planning (ERP) Software Security System

Extending RBAC for Large Enterprises and Its Quantitative Risk Evaluation

Contact Info

Product

Resources

About