Tradeoffs in Secure System Development: An Outline
Catherine A. Meadows · 1994
In this paper we identify several areas in which the satisfaction of security requirements can affect the cost and performance of a system, and describe what is known about tradeoffs in these areas. We also show where these tradeoffs appear in the life cycle of a system, and show how they are affected by different kinds of security requirements. 1 Introduction When designing a system of any magnitude, it is necessary to keep in mind that it must satisfy a large number of requirements, some of which may be in conflict with each other. In some cases it may be necessary to trade off the different requirements against each other; in other cases it may be possible to identify other system features that may be traded off to resolve the conflicts between the two requirements. This is as true of security as it is of any other system requirement. Tradeoffs in security can be complicated by the fact that a system may have a number of different security requirements that lead to demands that are...