Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

Technology Foundations for Computational Evaluation of Software Security Attributes

  • Abstract

    In the current state of practice, analysis of the security attributes of software systems is typically carried out through subjective evaluations by security experts who accumulate system knowledge in bits and pieces from architectures, specifications, designs, code, and tests. In contrast, this report describes foundations for a new computational security attributes (CSA) technology. This innovative approach provides precise computational methods for defining and analyzing security attributes based solely on the data and transformations of data found within programs. CSA permits security attributes to be evaluated through automatable analysis of the functional behavior of programs. The technology can support specification of security attributes of systems before they are built; specification and evaluation of security attributes of acquired software; verification of the as-built security attributes of systems; and real-time evaluation of security attributes during system operation.

  • Download

Cite This Report

SEI

Walton, Gwendolyn; Longstaff, Thomas; & Linger, Richard. Technology Foundations for Computational Evaluation of Software Security Attributes (CMU/SEI-2006-TR-021). Software Engineering Institute, Carnegie Mellon University, 2006. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8139

IEEE

Walton. Gwendolyn, Longstaff. Thomas, and Linger. Richard, "Technology Foundations for Computational Evaluation of Software Security Attributes," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2006-TR-021, 2006. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8139

APA

Walton, Gwendolyn., Longstaff, Thomas., & Linger, Richard. (2006). Technology Foundations for Computational Evaluation of Software Security Attributes (CMU/SEI-2006-TR-021). Retrieved December 20, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8139

CHI

Gwendolyn Walton, Thomas Longstaff, & Richard Linger. Technology Foundations for Computational Evaluation of Software Security Attributes (CMU/SEI-2006-TR-021). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2006. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8139

MLA

Walton, Gwendolyn., Longstaff, Thomas., & Linger, Richard. 2006. Technology Foundations for Computational Evaluation of Software Security Attributes (Technical Report CMU/SEI-2006-TR-021). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8139