In this paper, the authors present a new method for writing assurance cases. Assurance cases are documented bodies of evidence that provide a convincing and valid argument that a system is adequately dependable for a given application in a given environment. Assurance cases have been used mostly in the safety field, but are now beginning to be widely applied in other areas. Cyber security is on...

Software assurance is an important part of the software development process to reduce risks and ensure that the software is dependable and trustworthy. Software defects and weaknesses can often lead to software errors and failures and to exploitation by malicious users. Testing, certification and accreditation have been traditionally used in the software assurance process to attempt to improve ...

We extend continuous assurance research by proposing a novel continuous assurance architecture grounded in information fusion research. Existing continuous assurance architectures focus primarily on methods of monitoring assurance clients’ systems to detect anomalous activities and have not addressed the question of how to process the detected anomalies. Consequently, actual implementations of ...

Assurance has been defined as “the degree of confidence that security needs are satisfied”[2]. The problem with this definition is that, unless one has a way to specify security needs in some measurable way, assurance can not be expressed in a measurable way either. The definition leaves the practitioner with the challenge of determining what “security needs” are, whether or not they have been ...

Assurance cases are a key concept in communicating dependability assurance of computer systems among the stakeholders. Noting an analogy between assurance cases and proofs, we plan to apply the technology of interactive proof assistants for construction and assessment of assurance cases. Fig. 1 An illustration of GSN from [5] Note The purpose of this report is to record our presentation given a...

introduction: during radiotherapy, high accuracy in the dose delivery is required because there is a strong  relationship between the absorbed dose, local tumor control and particularly the normal tissue damage. in  many institutions, in vivo dosimetry using diodes is performed to check the actual dose delivered. in general,  the uncertainty in the dose delivered should fall within  ± 5% of the...

the aim of this study was to evaluate the utility of a proficiency testing program among limited number of local laboratories as an alternative to the iupac/citac guide on proficiency testing with a limited number of participants, specially where international schemes are not accessible. as a sample scheme we planned to determine aflatoxins (b1, g1, b2, g2, total) in iranian pistachio matrix. a...

We propose that voting protocols be judged in part on ballot casting assurance, a property which complements universal verifiability. Some protocols already support ballot casting assurance, though the concept has not received adequate explicit emphasis. Ballot casting assurance captures two well known voting concepts – cast as intended, and recorded as cast – into one end-to-end property: Alic...

Online feedback mechanisms harness the bi-directional communication capabilities of the Internet in order to engineer large-scale word-of-mouth networks. Best known so far as a technology for building trust and fostering cooperation in online marketplaces, such as eBay, these mechanisms are poised to have a much wider impact on organizations. Their growing popularity has potentially important i...