Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

A Simulation Model for Managing Survivability of Networked Information Systems

  • December 2000
  • By Soumyo D. Moitra, Suresh Konda
  • In this 2000 report, we develop a model to evaluate the tradeoffs between the cost of defense mechanisms for networked systems and the resulting expected survivability after a network attack.
  • Publisher: Software Engineering Institute
    CMU/SEI Report Number: CMU/SEI-2000-TR-020
  • Abstract

    In this paper we develop a model to evaluate the tradeoffs between the cost of defense mechanisms for networked systems and the resulting expected survivability after a network attack. The model consists of three submodels. The first submodel simulates the occurrence of attacks or incidents. The second submodel simulates the impact of an attack on the system. This depends on the type of attack and the defense mechanism installed in the system. The third submodel assesses the survivability of the system which depends on the degree of its degradation after the attack. By varying the level of defense in the simulation, we examine how this expected survivability changes with the defense level. Since costs are assumed to increase with the strength of the defense system, we can derive a cost/survivability curve that managers can use to decide on the appropriate level of security for their organizations. We have also explored the sensitivity of expected survivability to various parameters of the model, such as, the mix of attack types and the rate of occurrence of incidents.

  • Download

Cite This Report

SEI

Moitra, Soumyo; & Konda, Suresh. A Simulation Model for Managing Survivability of Networked Information Systems. CMU/SEI-2000-TR-020. Software Engineering Institute, Carnegie Mellon University. 2000. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5271

IEEE

Moitra. Soumyo, and Konda. Suresh, "A Simulation Model for Managing Survivability of Networked Information Systems," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2000-TR-020, 2000. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5271

APA

Moitra, Soumyo., & Konda, Suresh. (2000). A Simulation Model for Managing Survivability of Networked Information Systems (CMU/SEI-2000-TR-020). Retrieved March 25, 2017, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5271

CHI

Soumyo Moitra, & Suresh Konda. A Simulation Model for Managing Survivability of Networked Information Systems (CMU/SEI-2000-TR-020). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2000. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5271

MLA

Moitra, Soumyo., & Konda, Suresh. 2000. A Simulation Model for Managing Survivability of Networked Information Systems (Technical Report CMU/SEI-2000-TR-020). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5271

BibTex

@techreport{MoitraASimulation2000,
title={A Simulation Model for Managing Survivability of Networked Information Systems},
author={Soumyo Moitra and Suresh Konda},
year={2000},
number={CMU/SEI-2000-TR-020},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5271} }