STRAM: Measuring the Trustworthiness of Computer-Based Systems

摘要: Various system metrics have been proposed for measuring the quality of computer-based systems, such as dependability and security estimating their performance characteristics. As systems grow in complexity with many subsystems or components, multiple dimensions is a challenging task. In this work, we tackle problem based on four key attributes trustworthiness developed: security, trust, resilience, agility. addition to conducting systematic survey metrics, measurements, associated ontologies, propose system-level metric framework that accommodates submetrics, called STRAM (Security, Trust, Resilience, Agility Metrics). The offers hierarchical ontology structure where each submetric defined sub-ontology. Moreover, work proposes developing incorporating describing assessment tools, including vulnerability assessment, risk red teaming, provide additional evidence measurement trustworthy systems. We further discuss how tools are related limitations state-of-the-art measurements. Finally, suggest future research directions toward fundamental improving current methodologies.