loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
20th Annual Computer Security Applications Conference (ACSAC'04)
VIsualizing Enterprise-Wide Security (VIEWS)
Tucson, Arizona
December 06-December 10
ISBN: 0-7695-2252-1
J. J. Brennan, The MITRE Corporation
Mindy Rudell, The MITRE Corporation
Don Faatz, The MITRE Corporation
Carson Zimmerman, The MITRE Corporation
This paper discusses VIEWS, a specification for building diagrams that describe the security features of systems. The authors' recent experience with providing security architecture and engineering support to organizations with large, distributed applications suggests that security architecture and assurance efforts could benefit by following other engineering disciplines, where using graphical models is the norm Security diagrams can help security architects understand a system's security posture and can assist them in detecting vulnerabilities. Additionally, diagrams facilitate communications about the security features of a design.
The output of a modeling effort using VIEWS is a diagram depicting a system's security features as well as those of the environment in which the system operates. A goal of VIEWS is to allow the display of important security features without injecting cluttering detail. This paper presents examples of security diagrams built with VIEWS.
Citation:
J. J. Brennan, Mindy Rudell, Don Faatz, Carson Zimmerman, "VIsualizing Enterprise-Wide Security (VIEWS)," acsac, pp.71-79, 20th Annual Computer Security Applications Conference (ACSAC'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.