Use of integrity techniques and risk assessment in system design

This paper focuses on developing a formal understanding of "failure" with respect to system implementations. Furthermore, we would like the system design process to be able to leverage off of this understanding. Our approach is restricted to the class of systems that can be modelled by HFSMs as described in Winter (1998). The purpose of this paper is to lay out a classification process that can aid in identification and characterization of techniques for dealing with the different types of system threats. This classification framework leads naturally to a taxonomy of strategies and technologies for dealing with various types of threats.