Computational Evaluation of Software Security Attributes

In the current state of practice, security properties of software systems are typically assessed through subjective, labor-intensive human evaluation. Moreover, much of the quantitative security analysis research to date is characterized by the development of approximate solutions and/or based on assumptions that severely constrain the operational utility of the results. In order to achieve a dramatic increase in maturing the discipline of software security engineering, a fundamentally different approach to analysis and evaluation of security attributes is required. The computational security attributes (CSA) approach to software security analysis provides a new approach for specification of security attributes in terms of data and transformation of data by programs. This paper

• Type: Conference
• Year: 2009
• Where: HICSS
• Authors: Gwendolyn H. Walton, Thomas A. Longstaff, Richard C. Linger
• Keywords: Biometrics, HICSS 2009, Quantitative Security Analysis, Security Analysis, Security Attributes, System Sciences