sna-tutorial

Carnegie MellonSoftwa re Engineering InstituteThe Survivable Network AnalysisMethod:Assessing Survivability of CriticalSystemsSoftware Engineering InstituteCarnegie Mellon UniversityPittsburgh, PA 15213-3890Sponsored by the U.S. Department of Defense© 2000 by Carnegie Mellon UniversityVersion 2 SNA Tutorial - page 1Carnegie MellonSoftwa re Engineering InstituteAgenda System Survivability Concepts The Survivable Network Analysis (SNA) Method© 2000 by Carnegie Mellon University Version 2 SNA Tutorial - page 2Carnegie MellonSoftwa re Engineering Institute System SurvivabilityConcepts© 2000 by Carnegie Mellon University Version 2 SNA Tutorial - page 3Carnegie MellonSoftwa re Engineering InstituteSurvivability MotivationGrowing societal dependence on complex, large-scale,networked systemsSerious consequences of system compromises andfailuresTraditional security and vulnerability analysis nolonger sufficient© 2000 by Carnegie Mellon University Version 2 SNA Tutorial - page 4Carnegie MellonSoftwa re Engineering InstituteChanging Systems EnvironmentSystem evolution• expanding network boundariesadditional participants with varying levels of trustnumerous point solutions: Public Key Infrastructure,Virtual Private Networks, firewalls, ...blurring of Intranet and Extranet boundariesnew technologies -- directory services, XMLSystem securityNo amount of security can guarantee a system willnot be penetrated© 2000 by Carnegie ...