Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

The Survivability of Network Systems: An Empirical Analysis

  • December 2000
  • By Soumyo D. Moitra, Suresh Konda
  • This report, published in 2000, presents an extended analysis of CERT Coordination Center incidents data (from 1988 to 1995) and applies the results to simulate attacks and their impacts on network sites.
  • Publisher: Software Engineering Institute
    CMU/SEI Report Number: CMU/SEI-2000-TR-021
  • Abstract

    This report presents an extended analysis of CERT Coordination Center incidents data (from 1988 to 1995) and applies the results to simulate attacks and their impacts on network sites. The data were sanitized prior to the analysis to ensure complete anonymity. A model for the incidents process is discussed and extended. It consists of three parts: a stochastic process for the random occurrence of incidents at sites, a model for the state transition process for an attacked system given a level of defense, and a method of estimating the expected survivability of the system given possible degradations due to these attacks. This approach leads to the estimation of a survivability/cost function, which shows the tradeoffs involved between cost and system survivability. Information Systems (IS) managers can use this to determine the most appropriate level of defense for the network systems of their organizations. The stochastic process was simulated based on parameter values obtained from actual reported data. Extensive sensitivity analyses are reported that indicate how expected survivability would change with varying parameter analysis results values. The report concludes with a discussion of future work to be done and the appendix has details of the simulation model and further data.

  • Download

Cite This Report

SEI

Moitra, Soumyo; & Konda, Suresh. The Survivability of Network Systems: An Empirical Analysis. CMU/SEI-2000-TR-021 . Software Engineering Institute, Carnegie Mellon University. 2000. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5277

IEEE

Moitra. Soumyo, and Konda. Suresh, "The Survivability of Network Systems: An Empirical Analysis," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2000-TR-021 , 2000. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5277

APA

Moitra, Soumyo., & Konda, Suresh. (2000). The Survivability of Network Systems: An Empirical Analysis (CMU/SEI-2000-TR-021 ). Retrieved June 23, 2017, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5277

CHI

Soumyo Moitra, & Suresh Konda. The Survivability of Network Systems: An Empirical Analysis (CMU/SEI-2000-TR-021 ). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2000. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5277

MLA

Moitra, Soumyo., & Konda, Suresh. 2000. The Survivability of Network Systems: An Empirical Analysis (Technical Report CMU/SEI-2000-TR-021 ). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5277

BibTex

@techreport{MoitraTheSurvivability2000,
title={The Survivability of Network Systems: An Empirical Analysis},
author={Soumyo Moitra and Suresh Konda},
year={2000},
number={CMU/SEI-2000-TR-021 },
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=5277} }