Middleware for runtime assessment of information assurance

Authors:
Partha Pal;Rick Schantz;Joe Loyall
Affiliations:
BBN Technologies, Cambridge, MA;BBN Technologies, Cambridge, MA;BBN Technologies, Cambridge, MA
Venue:
Proceedings of the 11th International Middleware Conference Industrial track
Year:
2010

Citing 4
Cited 0

Service-oriented architecture: programming model and product architecture

IBM Systems Journal
Flexible and adaptive QoS control for distributed real-time and embedded middleware

Proceedings of the ACM/IFIP/USENIX 2003 International Conference on Middleware
From Auto-adaptive to Survivable and Self-Regenerative Systems Successes, Challenges, and Future

NCA '09 Proceedings of the 2009 Eighth IEEE International Symposium on Network Computing and Applications
A mission-impact-based approach to INFOSEC alarm correlation

RAID'02 Proceedings of the 5th international conference on Recent advances in intrusion detection

Quantified Score

Hi-index	0.00

Visualization

Abstract

We describe a middleware service and supporting methodology we have developed to facilitate runtime assessment of information assurance (IA) properties. The methodology structures the IA requirements of mission stakeholders along four axes, organizes the measurements and observations contributing to IA into a manageable number of metric classes, and provides a framework for constructing mission specific assessment rules derived from the metrics. The middleware service consists of runtime engines that connect with enterprise management databases and other sources to obtain metric values, evaluate the rules, and present the assessment results through visual interfaces. Results from evaluation of our initial proof of concept are encouraging, and we are continuing to refine and extend the prototype capabilities.