Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231)最新文献_第2页

Enhancing competitiveness via a public fault and failure data repository 通过公共故障和故障数据存储库增强竞争力

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731610

D. Wallace

{"title":"Enhancing competitiveness via a public fault and failure data repository","authors":"D. Wallace","doi":"10.1109/HASE.1998.731610","DOIUrl":"https://doi.org/10.1109/HASE.1998.731610","url":null,"abstract":"Today most software companies are under pressure to get reliable software products built quickly. To assist both industry and researchers, the Information Technology Laboratory (ITL) at NIST in the US, has initiated the Reference Data: Software Error, Fault, Failure Data Collection & Analysis Repository Project. Usually referred to as the EFF Project, the project treats the term \"error\" as the human action that produces the incorrect result; the term \"fault\" as the manifestation of an error in an artifact, and the term \"failure\" as the result of a fault that has been activated, or triggered, during operation of the software. The EFF project is collecting and analyzing data from either the development and maintenance processes or the operation of a delivered computer system. The data, with all proprietary information removed, will become available through a publicly accessible World Wide Web facility at NIST. Researchers may use the data for their experimentation. The information technology industry and researchers may use the resulting reference data to assist in many types of decisions for building better end user products and for developing new methods and tools to support industry. NIST encourages companies to consider the benefits of a public database. NIST will accept new or existing private data to augment the repository. Such data may be from either the software development or maintenance process, or may consist of failure data derived from systems already in service.","PeriodicalId":340424,"journal":{"name":"Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231)","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1998-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124742609","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Good enough versus high assurance software testing and analysis methods 与高保证软件测试和分析方法相比，足够好

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731609

W. Howden

引用次数: 13

Error and failure analysis of a UNIX server UNIX服务器的错误和故障分析

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731618

Ronjeet Lal, G. Choi

引用次数: 16

System survivability through security bug tolerance 通过安全错误容忍度实现的系统生存性

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731601

C. Pu, Crispin Cowan

{"title":"System survivability through security bug tolerance","authors":"C. Pu, Crispin Cowan","doi":"10.1109/HASE.1998.731601","DOIUrl":"https://doi.org/10.1109/HASE.1998.731601","url":null,"abstract":"Summary form only given. A traditional approach to system security is the construction of entirely new software that satisfy well defined security properties. However, the market pressure towards features seems to make such approach infeasible in the near term. Increasingly, commercial off-the-shelf software such as Windows NT is being used in mission critical information infrastructures. Therefore, alternative means must be found to protect large commercial software from attack. We present the security bug tolerance approach as an alternative to building highly secure software from scratch. Security bug tolerance accepts the idea that critical system software will contain vulnerabilities in the form of exploitable bugs, and seeks effective means to prevent these bugs from being exploited efficiently by attackers. We present a categorization scheme for security bug tolerance techniques, and populate it with techniques of our own and from the literature. The categorization is powerful enough to analyze and compare the similarities and differences of relatively diverse techniques such as firewalls, program type checking, and \"security through obscurity\". The goal of security bug tolerance techniques is system survivability (e.g., graceful degradation of system functionality or performance in the presence of attacks) in contrast to complete system security. Instead of ferreting out all potential vulnerabilities using the broad array of accepted techniques, such as formal methods and fault injection, we study means to stop and slow down attacks when they occur.","PeriodicalId":340424,"journal":{"name":"Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231)","volume":"81 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1998-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128270126","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Assurance of transactions in allied heterogeneous systems by autonomous decentralized system techniques 自主分散系统技术在联合异构系统中的事务保证

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731630

Hideo Hanamura, K. Mori

引用次数: 5

Estimating the number of residual defects [in software] 估算[软件中]剩余缺陷的数量

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731600

Y. Malaiya, J. Denton

引用次数: 16

A two-version approach for real-time concurrency control and recovery 用于实时并发控制和恢复的双版本方法

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731628

Tei-Wei Kuo, Yuan-Ting Kao, Lihchyun Shu

引用次数: 13

Log-logistic software reliability growth model logistic软件可靠性增长模型

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731593

S. Gokhale, Kishor S. Trivedi

引用次数: 139

Optimal discrimination between transient and permanent faults 暂态和永久故障的最优判别

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731615

M. Pizza, L. Strigini, A. Bondavalli, F. Giandomenico

引用次数: 37

Predictable safety in the control of high consequence systems 高后果系统控制中的可预测安全性

Proceedings Third IEEE International High-Assurance Systems Engineering Symposium (Cat. No.98EX231) Pub Date : 1998-11-13 DOI: 10.1109/HASE.1998.731612

J. M. Covan, J. A. Cooper

引用次数: 3