Two Systems Safety Analyses Useful in Examining the Vulnerabilities of Security Systems
Norman E. Groner · Journal of Applied Security Research · 2008
Systems safety methods can be used to better understand the threats and vulnerabilities in complex technological systems. They provide comprehensive, well-reasoned, and easily communicated analyses of the vulnerabilities of security systems. This article provides a primer on the use of the two most adaptable and useful among the many systems safety methods: Failure Modes and Effects Analysis and Fault Tree Analysis. They provide two different perspectives that examine vulnerabilities of security systems. Both methods can use qualitative as well as quantitative information and can integrate both physical and social (rules, procedures, and software) artifacts. Examples of both methods are provided using a generic example of an access control system. Suggestions for using goals to define system boundaries and components are provided.