Reflections on operating in hostile environments
Anil Bazaz, James Daniel Arthur, Randy C. Marchany · 2004
We introduce a generally applicable framework to assess and substantiate the security of a software component of a computer system. The framework constitutes a metamodel. Security models can be derived from it for components of a computer system. The concept of trust is interwoven into the metamodel and is an integral part of derived security models.