Foundations for Survivable Systems Engineering
Robert J. Ellison, Richard C. Linger, Howard F. Lipson, Nancy R. Mead, Andrew P. Moore · 2002
security is addressed too late in the development cycle, with boundary controllers used for after-the-fact remediation when systems are deployed. Moreover, the adequacy of boundary controllers decreases as user task flows traverse multiple system boundaries and security administration domains. Sophisticated intruders can attack a broad range of targets across domains. Resistance and response to such attacks are often the responsibility of multiple enterprises and their system and application architectures.