System Assurance

Foreword Preface Chapter 1: Why hackers know more about our systems 1.1 Operating in cyberspace involves risks 1.2 Why hackers are repeatedly successful 1.3 What are the challenges in defending cybersystems? 1.3.1 Difficulties in understanding and assessing risks 1.3.2 Complex supply chains 1.3.3 Complex system integrations 1.3.4 Limitations of system assessment practices 1.3.5 Limitations of white-box vulnerability detection 1.3.6 Limitations of black-box vulnerability detection 1.4 Where do we go from here? 1.4.1 Systematic and repeatable defense at affordable cost 1.4.2 The OMG software assurance ecosystem 1.4.3 Linguistic modeling to manage the common vocabulary 1.5 Who should read this book? Chapter 2: Confidence as a product 2.1 Are you confident that there is no black cat in the dark room? 2.2 The nature of assurance 2.2.1 Engineering, risk, and assurance 2.2.2 Assurance case 2.3 Overview of the assurance process 2.3.1 Producing confidence 2.3.2 Economics of confidence Chapter 3: How to build confidence 3.1 Assurance in the system life cycle 3.2 Activities of system assurance process 3.2.1 Project definition 3.2.2 Project preparation 3.2.3 Assurance argument development 3.2.4 Architecture security analysis 3.2.5 Evidence analysis 3.2.6 Assurance case delivery Chapter 4: Knowledge of system as an element of cybersecurity argument 4.1 What is system? 4.2 Boundaries of the system 4.3 Resolution of the system description 4.4 Conceptual commitment for system descriptions 4.5 System architecture 4.6 Example of an architecture framework 4.7 Elements of system 4.8 System knowledge involves multiple viewpoints 4.9 Concept of operations (CONOP)