System Assurance

Chapter 12. Case study

Abstract

This chapter describes a single case study in which we illustrate the key elements of system assurance and the OMG Software Assurance Ecosystem. In particular, we describe the concept of operations and the security policy of the system using SBVR; highlight the threat identification and the architecture descriptions of the system; and develop fragments of the assurance case, focusing on one security requirement. The case study demonstrates the linguistic analysis of the security requirement, identification of the key characteristics, and development of the portion of the assurance argument based on these characteristics down to the level of simple queries to the KDM fact-oriented repository, from which the evidence ...