Evaluating confidence levels for security scenarios in attribute architectures

  • Authors:
  • Tacksoo Im;John D. McGregor

  • Affiliations:
  • Clemson University, Clemson, SC;Clemson University, Clemson, SC

  • Venue:
  • Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security of the data manipulated by a program is often a key attribute of the architecture of that program. Scenarios drive software architecture design. Quality attribute scenarios, such as security scenarios, describe a use of the system in terms of specific quality attribute values. An analytic theory describes an algorithm that will use the attribute architecture representation to predict the quality attribute values represented by the scenarios. It is difficult to determine how much confidence can be placed in the calculation of quality attribute values. Confidence intervals on those predictions can be used to help the software architect make better decisions about the architecture. In this paper, we explore a specific aspect of a reasoning framework for security, how to compute confidence levels for the quality attribute values resulting from security scenarios.