The essence of information assurance and its implications for the Ada community

ABSTRACT

There is a growing need to engineer and operate critical systems with some level of measurable trust in the functions that make these systems secure. The term Information Assurance (IA) is now widely used to refer to the general concept of system security and this establishment of trust, but IA has yet to receive a precise definition. This paper discusses the concepts and principles that are essential to achieving IA objectives as a means to provide insights to the safety-critical Ada community regarding opportunities to impact the development of trusted security solutions.

REFERENCES

• 1: Edward G. Amoroso, Fundamentals of computer security technology, Prentice-Hall, Inc., Upper Saddle River, NJ, 1994
• 2: Common Criteria for Information Technology Security Evaluation, http://www.commoncriteria.org/cc/cc.html.
• 3: Common Criteria Recognition Arrangement, http://www.commoncriteria.org/registry/mr.html
• 4: First IEEE International Information Assurance Workshop, http://www.ieee-tfia.org/iwia2003/cfp.html
• 5: Morrie Gasser, Building a secure computer system, Van Nostrand Reinhold Co., New York, NY, 1988
• 6: Nancy G. Leveson, Safeware: system safety and computers, ACM Press, New York, NY, 1995
• 7: Trusted Computer System Evaluation Criteria (TCSEC), US Dept of Defense (1985)
• 8: J. J. Whitmore, A method for designing secure solutions, IBM Systems Journal, v.40 n.3, p.747-768, March 2001
• 9: Wulf, W.A., Cyber Security: Beyond the Maginot Line, http://www.house.gov/science/full/oct10/wulf.htm

INDEX TERMS

Primary Classification:
  D. Software
  D.3 PROGRAMMING LANGUAGES
      D.3.2 Language Classifications

          Nouns: Ada

Additional Classification:
  J. Computer Applications
  J.7 COMPUTERS IN OTHER SYSTEMS
      Subjects: Real time

Keywords:
information assurance, security engineering