Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

5   Approximating Reality

Overview

•   5.1 The Complexity of State: Why Model?

•   5.2 Levels of Abstraction: At What Levels

•   5.3 What to Model and Why

•   5.3.1 The Target System

•   5.3.2 Users

•   5.3.3 Adversaries

•   5.3.4 Measures/Countermeasures

•   5.4 Models Are Always Wrong, Sometimes Useful

•   5.4.1 Incompleteness of Essentials

•   5.4.2 Inaccuracy

•   5.4.3 Non-Timeliness

•   5.5 Model Views

•   5.5.1 Defender’s View

•   5.5.2 Adversary’s View

•   5.5.3 Attacking the Views Themselves

•   5.6 Defense Models Must Consider Failure Modes

•   5.7 Assume Adversaries Know Defender’s System

•   5.8 Assume Adversaries Are Inside Defender’s System

Learning Objectives

•   Explain the concept of system state and why it is too complex ...