Middleware for runtime assessment of information assurance
Partha Pratim Pal, Rick Schantz, Joe Loyall · 2010
We describe a middleware service and supporting methodology we have developed to facilitate runtime assessment of information assurance (IA) properties. The methodology structures the IA requirements of mission stakeholders along four axes, organizes the measurements and observations contributing to IA into a manageable number of metric classes, and provides a framework for constructing mission specific assessment rules derived from the metrics. The middleware service consists of runtime engines that connect with enterprise management databases and other sources to obtain metric values, evaluate the rules, and present the assessment results through visual interfaces. Results from evaluation of our initial proof of concept are encouraging, and we are continuing to refine and extend the prototype capabilities.