|
|
|
Survivability MetricsA View from the Trenches
Citation: Partha Pal, Richard Schantz and Franklin Webber "Survivability Metrics-- A View from the Trenches." , DSN Workshop on Assurance Cases for Security - The Metrics Challange, Edunburgh, June 27, 2007.
Abstract In this paper we describe our latest experience in evaluating a survivable system. This effort signified an unprecedented attempt to specify quantitative survivability metrics and to evaluate the system against them. Even though one way to quantitatively score the survivable system was demonstrated- a significant step forward in the context of survivability validation in its own right- it was also apparent that such quantitative measurements, by themselves, did not adequately establish the assurance case for the survivable system, and more research is needed in this area. With the advantage of 20-20 hindsight, we outline a number of thoughts about survivability metrics that are more amenable to assurance cases.
KEYWORDS: Evaluating Survivability, Metrics, Red Team Exercises