Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

20   Architecting Cybersecurity

Overview

•   20.1 Reference Monitor Properties

•   20.1.1 Functional Correctness

•   20.1.2 Non-Bypassable

•   20.1.3 Tamperproof

•   20.2 Simplicity and Minimality Breed Confidence

•   20.3 Separation of Concerns and Evolvability

•   20.4 Security Policy Processing

•   20.4.1 Policy Specification

•   20.4.2 Policy Decision Making

•   20.4.3 Policy Enforcement

•   20.5 Dependability and Tolerance

•   20.5.1 Cybersecurity Requires Fail Safety

•   20.5.2 Expect Failure: Confine Damages Using Bulkheads

•   20.5.3 Tolerance

•   20.5.4 Synergize Prevention, Detect-Response, and Tolerance

•   20.6 Cloud Cybersecurity

Learning Objectives

•   Differentiate cybersecurity architecture from the aggregation of widgets. ...