All Research Papers

Survivability

• Technical Report: Survivable Network Systems: An Emerging Discipline. November 1997 (pdf)

• Paper: Survivability: Protecting Your Critical Systems (condensed version of Survivable Network Systems), published in the November/December 1999 issue of IEEE Internet Computing

• Paper: Survivability - A New Technical and Business Perspective on Security. Proceedings of the 1999 New Security Paradigms Workshop. Caledon Hill, ON, September 21-24, 1999. New York, NY: Association for Computer Machinery, 2000 (pdf)

• Presentation: Survivability - A New Security Paradigm for Protecting Highly Distributed Mission Critical Systems. 38th Meeting of IFIP Working Group 10.4 on Dependable Computing and Fault Tolerance. Kerhonkson, NY, June 28-July 2, 2000 (pdf)

• Paper: The Survivability Imperative: Protecting Critical Systems. CrossTalk, October 2000

• Presentation: Survivable Network Technology for the Survivability of Critical Systems - Intruder Trends that IRTs Will Have to Handle: 2001-2010. June 2001 (pdf)

• Technical Report: Foundations for Survivable System Development: Service Traces, Intrusion Traces, and Evaluation Models. October 2001 (pdf)

Modeling and Predicting Survivability Attributes (Emergent Algorithms)

• Technical Report: Network Survivability Analysis Using Easel December 2002 (pdf)

• Paper: Emergent Algorithms: A New Method for Enhancing Survivability in Unbounded Systems . Proceedings of the Hawaii International Conference on System Sciences. Maui, HI, January 5-8, 1999. IEEE, 1999

• Paper: Emergent Algorithms for Survivable Systems, Proceedings of the 1998 Information Survivability Workshop. Orlando, FL, October 28-30, 1998. Software Engineering Institute and IEEE Computer Society, 1998

• Paper: Simulation and Visualization of Survivability Problems and Solutions. The 1999 Software Engineering Symposium—Improving the State of Software Engineering. Pittsburgh, PA, August 30-September 22, 1999

Survivability Engineering

• Paper: Foundations for Survivable Systems Engineering html | pdf, May 2002 (html)

• Technical Report: Security Quality Requirements Engineering (SQUARE) Methodology November 2005 (pdf)
• Special Report: Security Quality Requirements Engineering (SQUARE): Case Study on Asset Managment System, Phase II May 2005 (pdf)
• Special Report: Systems Quality Requirements Engineering (SQUARE) Methodology: Case Study on Asset Management System December 2004 (pdf)
• Technical Note:SQUARE Project: Cost/Benefit Analysis Framework for Information Security Improvement Project in Small Companies November 2004 (pdf)
• Technical Note: Requirements Engineering for Survivable Systems September 2003 (pdf)

• Paper: Requirements Definition for Survivable Network Systems (pdf)

• Technical Note: Trustworthy Integration: Challenges for the Practitioner October 2005 (pdf)

• Technical Report: Security and Survivability Reasoning Frameworks and Architectural Design Tactics September 2004 (pdf)

• Technical Report: Trustworthy Refinement Through Intrusion-Aware Design March 2003 (pdf)

• Technical Note: Applying FSQ Engineering Foundations to Automated Calculation of Program Behavior February 2003 (pdf)

• Paper: Trustworthy Refinement through Intrusion-Aware Design (TRIAD): An Overview February 2003 (pdf)

• Technical Note: Flow-Service-Quality (FSQ) Engineering: Foundations for Network System Analysis and Development. June 2002 (pdf)

• Paper: Overview of The Survivable Systems Analysis Method. September 2000

• Presentation: The Survivable Network Analysis Method: Assessing Survivability of Critical Systems (pdf)

• Technical Report: Survivable Network Analysis Method. September 2000 (pdf)

• Technical Report: A Case Study in Survivable Network System Analysis. September 1998 (pdf)

• Technical Report: Survivable Network System Analysis: A Case Study, (condensed version of SEI Technical Report CMU/SEI-98-TR-014, ESC-TR-98-014) published in July/August 1999 issue of IEEE Software (pdf)

• Tutorial: The Survivable Network Analysis Method: Assessing Survivability of Critical Systems (pdf)

• Paper: Systematic Generation of Stochastic Diversity as an Intrusion Barrier in Survivable Systems Software

• Technical Report: Evolutionary Systems Design: Recognizing Changes in Security and Survivability Risks September 2006 (pdf)

• Technical Report: Life-Cycle Models for Survivable Systems October 2002 (pdf)

• Technical Note: Can We Ever Build Survivable Systems from COTS Components? December 2001 (pdf)

• Technical Report: Foundations for Survivable System Development: Service Traces, Intrusion Traces, and Evaluation Models October 2001 (pdf)

• Technical Note: Architectural Refinement for the Design of Survivable Systems October 2001 (pdf)

• Technical Note: Attack Modeling for Information Security and Survivability. March 2001 (pdf)

• Technical Report: A Simulation Model for Managing Survivability of Networked Information Systems. December 2000 (pdf)

• Paper: Life-Cycle Models for Survivable Systems, published in the Proceedings of the Third Information Survivability Workshop (ISW 2000), October 24-26, 2000 (pdf)

• Paper: Life-Cycle Considerations for Survivable Systems, Cutter IT E-Mail Advisor, Vol. 10, no. 1 (January 2000)

• Paper: Survivability through Intrusion-Aware Design (pdf)

• Presentation: Lifecycle Models for Survivable Systems (pdf)

Analysis & Trends

• Presentation: Can Secure Systems be Built Using Today's Development Processes? Summary (pdf) | Panel Presentation June 2004 (pdf)

• Special Report: International Liability Issues for Software Quality July 2003 (pdf)

• Special Report: Tracking and Tracing Cyber-Attacks: Technical Challenges and Global Policy Issues November 2002 (pdf)

• Presentation: Protection of Critical Infrastructures: A New Perspective September 2003 (ppt)

• Paper: Models of Information Security Trend Analysis April 2002 (pdf)

• Presentation: Cyberterrorism Fall 2001 (ppt)

• Technical Report: The Survivability of Network Systems: An Empirical Analysis. December 2000 (pdf)

• Technical Report: rlogin(1): The Untold Story. November 1998 (pdf)

• Technical Report: A Common Language for Computer Security Incidents. Sandia Report prepared by Sandia National Laboratories. October 1998 (pdf)

• Paper: An Analysis of Security Incidents on the Internet 1989-1995 April 1997

• Paper: Countering Cyber War Winter 2001-2002 (pdf)

• Paper: Intelligence Analysis for Internet Security

Other Survivability Information and Projects

David Fisher and Howard Lipson were advisors for the following Master's theses:

• Survivability of the U.S. Electric Power Industry. May 2000 (pdf)
  Imju Byon

• Survivability Requirements for the U.S. Health Care Industry. May 2000 (pdf)
  Jose Caldera

• Study of the Interdependencies Within the Banking and Finance Infrastructure for Survivability Research. December 1999 (pdf)
  Yen-Ming Chen

• Countering Cyber War. NATO Review, Winter 2001/2002 (pdf)
  Timothy Shimeall, Phil Williams, Casey Dunlevy

• Malicious IT Roundtable: Roundtable on Information Security Policy. IEEE Software, July 2000 (pdf)
  Attendees: Tim Shimeall, conducted by Dr. Nancy Mead

• Defending Yourself: The Role of Intrusion Detection Systems. IEEE Software, September/October 2000 (pdf)
  John McHugh, Alan Christie, Julia Allen

• Toward Survivable COTS-Based Systems, Cutter IT Journal, Vol. 14, no. 2 (February 2001)