A RiskManagement Approach to the Design of Survivable COTSBased Systems.pdfVIP

A Risk-Management Approach to the Design of Survivable COTS-Based Systems Howard F. Lipson Nancy R. Mead Andrew P. Moore hfl@cert.org nrm@sei.cmu.edu apm@cert.org 412-268-7237 412-268-5756 412-268-5465 CERT® Coordination Center Software Engineering Institute Pittsburgh, PA 15213 USA © 2001 by Carnegie Mellon University The indiscriminate use of COTS components is a primary impediment to the design of survivable systems. Lower upfront costs, and a belief that the cost savings extend throughout the system ’s lifecycle, are primary motivators in the shift from custom-designed to COTS-based systems. The disadvantages associated with COTS-based design include the absence of source code and the lack of access to the other artifacts of the software engineering process used to design the COTS components. These artifacts include architectural representations, comprehensive test results, results of (or even indications of the existence of) design reviews and code walkthroughs, and descriptions of (and the design rationale for) all explicit tradeoffs among the various attributes of software quality, such as performance, security, reliability, modifiability, usability, and cost. Moreover, the economic realities of mass-produced software bias these design tradeoffs in favor of lower costs and increased market share for the vendor, whereas survivability is largely dependent upon those software quality attributes (such as security and reliability) that support the mission of the acquiring organization. Building survivable systems using COTS components is a daunting task because the artifacts of the software engineering pr