A Framework of Quantitative Analysis for Information
System Survivability
Lin Xue-gang①; Xu Rong-sheng②; Xiong Hua③; Zhu Miao-liang①
①Institute of Artificial Intelligence, Zhejiang University, Hangzhou 310027, China;②Computing Center, Institute of High Energy Physics, CAS, Beijing 100049, China; ③The Fifty-fourth Institute, Headquarters of the General Staff, Beijing 100083, China
Abstract：Survivability should be considered beyond security for information system, and quantitative analysis can assess system survivability accurately for improvement. Information system is presented by finite state machine and its state transition map is used to describe analysis process, where the hierarchical structure of system state avoids the problem of enumerating states in Markov chain model. Based on SNA method, a framework of quantitative analysis is introduced: defining system, testing system’s survivability, computing survivability, and giving analysis report finally, which is easily implemented by computer. In the framework, the event database which is based on event classification and grade makes creating test project automatically and objectively, and survivability is computed through resistance, recognition and recovery in a hierarchical process.
2006, Vol. 28 
