Details

Autor(en) / Beteiligte

• Aldini, Alessandro
• Bernardo, Marco

Titel

An Integrated View of Security Analysis and Performance Evaluation: Trading QoS with Covert Channel Bandwidth

Ist Teil von

• Computer Safety, Reliability, and Security, 2004, p.283-296

Ort / Verlag

Berlin, Heidelberg: Springer Berlin Heidelberg

Erscheinungsjahr

2004

Link zum Volltext

Quelle

Alma/SFX Local Collection

Beschreibungen/Notizen

• Security analysis and performance evaluation are two fundamental activities in the system design process, which are usually carried out separately. Unfortunately, a purely qualitative analysis of the security requirements is not sufficient in the case of real systems, as they suffer from unavoidable information leaks that need to be quantified. In this paper we propose an integrated and tool-supported methodology encompassing both activities, thus providing insights about how to trade the quality of service delivered by a system with the bandwidth of its covert channels. The methodology is illustrated by assessing the effectiveness and the efficiency of the securing strategy implemented in the NRL Pump, a trusted device proposed to secure the replication of information from a low-security level enclave to a high-security level enclave.