Designed-In Security in Context 2012 HCSS Conference
Designed-In Security
in Context
2012 HCSS Conference
Carl Landwehr
Independent Consultant
Carl.Landwehr@gmail.com
www.landwehr.org
Context:
D
E
C
E
M
B
E
R
2
0
1
1
Four Thrusts:
O
Inducing Change (4 research themes here)
O
Developing Scientific Foundations
O
Maximizing Research Impact (research
coordination)
O
Accelerating Transition to Practice
Inducing Change
O
“Utilizing
game-changing themes
to direct
efforts towards
understanding the
underlying root causes
of known current
threats with the
goal of disrupting the status
quo with radically different approaches
to
improve the security of the critical cyber
systems and infrastructure that serve
society”
Developing Scientific
Foundations
O
"Developing an organized, cohesive scientific
foundation to the
body of knowledge
that
informs the field of cybersecurity through
adoption of a systematic, rigorous, and
disciplined scientific approach. Promotes the
discovery of laws, hypothesis testing, repeatable
experimental designs, standardized data-
gathering methods, metrics, common
terminology, and critical analysis that engenders
reproducible results and rationally-based
conclusions."
Maximizing Research Impact
O
”Catalyzing integration across the game-
changing R&D themes, cooperation between
governmental and private-sector
communities, collaboration across
international borders, and strengthened
linkages to other national priorities, such as
health IT and Smart Grid."
Accelerating Transition to
Practice
O
"Focusing efforts to ensure adoption and
implementation of the powerful new
technologies and strategies that emerge
from the research themes, and the activities
to build a scientific foundation so as to
create measurable improvements in the
cybersecurity landscape"
Four Research Themes
O
Tailored Trustworthy Spaces
O
Be able to configure cyber “subspaces” in accordance
with different kinds of trust requirements
O
Moving Target
O
Acknowledge that systems have vulnerabilities; raise
cost to attacker by moving them around
O
Cyber Economic Incentives
O
Learn how to structure incentives so we get the
security we want to have in deployed systems
O
And . . .
Designed-In Security
O
"Builds the capability to design, develop, and evolve
high-assurance, software-intensive systems
predictably and reliably while effectively managing
risk, cost, schedule, quality, and complexity.
O
Promotes tools and environments that enable the
simultaneous development of cyber-secure systems
and the associated assurance evidence necessary to
prove the system's resistance to vulnerabilities, flaws,
and attacks.
O
Secure, best practices are built inside the system.
O
Consequently, it becomes possible to evolve
software-intensive systems more rapidly in response
to changing requirements and environments."
How does this theme relate
to the others?
O
Tailored Trustworthy Spaces:
O
addresses mission needs, requires trustworthy
mechanisms
O
Moving Target
O
Acknowledges weaknesses, focuses on agility,
reaction. Still needs sound mechanisms for
system control
O
Cyber Economic Incentives
O
Focuses on incentivizing deployment, not
providing the tools to deploy
How new is this theme?
Floyd
67
Automated Theorem
Proving
Knuth
Literate Prog.
86
Program
Verification
Hoare
69
Dijkstra
T.H.E. 68
Boyer-
Moore 71
UT / CLINC:
GVE 74 / ROSE 88
IP Sharp ORA-Canada:
mEVES-mVerdi 83
EVES -Verdi 87
SDVS 77
ORA-US:
Romulus (Ulysses)84?
Penelope86/CLIO
Programming
Methodology
Dijkstra
Disc. of
Prog -76
SRI: SPECIAL- HDM 76/ EHDM 83 / PVS 90?
SDC/Burroughs/Unisys:
Ina-Jo / FDM
ISI, GE, RPI:
XIVUS / AFFIRM 76
Bledsoe
London
Gries
Sci. of Prog
81
Parnas
Info. Hiding
72
Struct. Pgming -
DD&H - 72
Hoare
CSP 78 - 85
LCF 77
Larch 80
IPV-
PARC
73
HOL 85
Sufrin Z
84
Balzac
91
Raise
85
Security
Modeling &
Theory
1970
1980
1990
HWM-
ADEPT-50
Ware
Rept
Anderson
Rept -
Ref Monitor
Bell-
LaPadula
Denning
Lattice
Feiertag
B-L / KSOS
Goguen.-
Meseguer
Non-
Interference
Walter
et al
Sutherland
McCullough
Hook-up
McLean
System Z
McCullough
Restrictiveness
Gray
P
robabilistic
N-I
Clark
Wilson
How important is this theme?
O
Recent comments on pending cybersecurity
legislation from Northrup Grumman CEO reveal
how weak our position is
O
Current political wrangling over privacy and
information sharing: at root a system
vulnerability problem
O
Arguments in favor of stronger measures need
strong evidence to back them up
O
Effective, Efficient, Scalable, Repeatable
O
This theme should support research to
generate the technology and the evidence
What do we need to tip the balance?
O
Good ideas from YOU!
Unreasonably
vulnerable
Reasonably
Invulnerable
Thank You!
Carl Landwehr
Carl.Landwehr@gmail.com
Four Thrusts: Inducing Change, Developing Scientific Foundations, Maximizing Research Impact, Accelerating Transition to Practice. Inducing Change by disrupting the status quo with different approaches. Developing Scientific Foundations in cybersecurity through a disciplined scientific approach. Maximizing Research Impact by integrating R&D themes. Accelerating Transition to Practice to ensure adoption of new technologies. Tailored Trustworthy Spaces and Moving Target are key research themes.
Uploaded on Feb 24, 2025 | 0 Views
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Designed-In Security in Context 2012 HCSS Conference Carl Landwehr Independent Consultant Carl.Landwehr@gmail.com www.landwehr.org
Context: DECEMBER 2011
Four Thrusts: O Inducing Change (4 research themes here) O Developing Scientific Foundations O Maximizing Research Impact (research coordination) O Accelerating Transition to Practice
Inducing Change O Utilizing game-changing themes to direct efforts towards understanding the underlying root causes of known current threats with the goal of disrupting the status quo with radically different approaches to improve the security of the critical cyber systems and infrastructure that serve society
Developing Scientific Foundations O "Developing an organized, cohesive scientific foundation to the body of knowledge that informs the field of cybersecurity through adoption of a systematic, rigorous, and disciplined scientific approach. Promotes the discovery of laws, hypothesis testing, repeatable experimental designs, standardized data- gathering methods, metrics, common terminology, and critical analysis that engenders reproducible results and rationally-based conclusions."
Maximizing Research Impact O Catalyzing integration across the game- changing R&D themes, cooperation between governmental and private-sector communities, collaboration across international borders, and strengthened linkages to other national priorities, such as health IT and Smart Grid."
Accelerating Transition to Practice O "Focusing efforts to ensure adoption and implementation of the powerful new technologies and strategies that emerge from the research themes, and the activities to build a scientific foundation so as to create measurable improvements in the cybersecurity landscape"
Four Research Themes O Tailored Trustworthy Spaces OBe able to configure cyber subspaces in accordance with different kinds of trust requirements O Moving Target OAcknowledge that systems have vulnerabilities; raise cost to attacker by moving them around O Cyber Economic Incentives OLearn how to structure incentives so we get the security we want to have in deployed systems O And . . .
Designed-In Security O "Builds the capability to design, develop, and evolve high-assurance, software-intensive systems predictably and reliably while effectively managing risk, cost, schedule, quality, and complexity. O Promotes tools and environments that enable the simultaneous development of cyber-secure systems and the associated assurance evidence necessary to prove the system's resistance to vulnerabilities, flaws, and attacks. O Secure, best practices are built inside the system. O Consequently, it becomes possible to evolve software-intensive systems more rapidly in response to changing requirements and environments."
How does this theme relate to the others? OTailored Trustworthy Spaces: O addresses mission needs, requires trustworthy mechanisms O Moving Target O Acknowledges weaknesses, focuses on agility, reaction. Still needs sound mechanisms for system control O Cyber Economic Incentives O Focuses on incentivizing deployment, not providing the tools to deploy
How new is this theme? Programming Methodology Hoare CSP 78 - 85 Raise 85 Balzac 91 Sufrin Z 84 Parnas Info. Hiding 72 Gries Sci. of Prog 81 Dijkstra Disc. of Prog -76 Knuth Literate Prog. 86 Dijkstra T.H.E. 68 Struct. Pgming - DD&H - 72 SRI: SPECIAL- HDM 76/ EHDM 83 / PVS 90? Program Verification IPV- PARC 73 UT / CLINC: GVE 74 / ROSE 88 IP Sharp ORA-Canada: mEVES-mVerdi 83 EVES -Verdi 87 ORA-US: Romulus (Ulysses)84? Penelope86/CLIO HOL 85 Hoare 69 Floyd 67 SDC/Burroughs/Unisys: Ina-Jo / FDM ISI, GE, RPI: XIVUS / AFFIRM 76 London Automated Theorem Proving Bledsoe Larch 80 SDVS 77 LCF 77 Boyer- Moore 71 1970 Clark Wilson 1980 1990 McCullough Restrictiveness Walter et al Goguen.- Meseguer Non- Interference HWM- ADEPT-50 Feiertag B-L / KSOS Ware Rept Bell- LaPadula McCullough Hook-up Security Modeling & Theory Gray Probabilistic N-I Sutherland McLean System Z Anderson Rept - Ref Monitor Denning Lattice
How important is this theme? O Recent comments on pending cybersecurity legislation from Northrup Grumman CEO reveal how weak our position is O Current political wrangling over privacy and information sharing: at root a system vulnerability problem O Arguments in favor of stronger measures need strong evidence to back them up O Effective, Efficient, Scalable, Repeatable O This theme should support research to generate the technology and the evidence
What do we need to tip the balance? O Good ideas from YOU! Unreasonably vulnerable Reasonably Invulnerable
Thank You! Carl Landwehr Carl.Landwehr@gmail.com
