Re: Hardware security metrics

From: Volker Birk (bumens_at_dingens.org)
Date: 09/15/05

  • Next message: Matt: "Re: Digital Singatures question" 
    Date: 15 Sep 2005 20:08:55 +0200

    mjr1007@yahoo.com wrote:
    > Just as there are performance metrics for hardware, (mips, megaflops,
    > mips per watt...) I was hoping there might be similar metrics for
    > security.

    Usually, security has no metric. A metric is a relation, which fulfills
    the triangle inequality. So it needs a measure, which can be quantified.

    Security means, that you want to be safe from certain events.

    To be safe from an event cannot be quantified, or single events can be
    quantified with a probability only. So it is not trivial (if sensibly
    possible at all) to define a security metric.

    Usually, because of these facts people are classifiing bundles of
    safety topics, so one can have something like a measure for security,
    too: wether a system is of a predefined class or not, and classes
    can be ordered.

    I don't know such classifiing for hardware, though. I'd say, hardware
    means that you have to trust the manufacturor. Of course, i.e. you can
    proof VHDL code, too. But how do you want to guarantee, that what was
    proofed, also is what was built?

    Yours,
    VB. 

    -- 
"Es kann nicht sein, dass die Frustrierten in Rom bestimmen, was in
deutschen Schlafzimmern passiert".
                                    Harald Schmidt zum "Weltjugendtag"
  • Next message: Matt: "Re: Digital Singatures question"

    Relevant Pages

    • Re: Hardware security metrics
      ... Just as there are performance metrics for hardware, (mips, megaflops, ... to be quite a bit of info on software and systems security put precious ...
      (comp.security.misc)
    • RE: What do you use for security metrics
      ... What do you use for security metrics ... -Can we conclude this - there is no system as yet to streamline Security ... Technical metrics should always override the business metrics. ...
      (Security-Basics)
    • Is IDS/IPS worthless?
      ... implementation of an IDS/IPS achieve?" ... I responded that an IDS gives ... So this speaker then challenged me to come up with verifiable metrics. ... operations and security is a critical component of IT. ...
      (Focus-IDS)
    • RE: What do you use for security metrics
      ... What do you use for security metrics ... Technical metrics should always override the business metrics. ...
      (Security-Basics)
    • RE: What do you use for security metrics
      ... What do you use for security metrics ... I would consider the cipher strength of the gateways and the ... Technical metrics should always override the business metrics. ...
      (Security-Basics)
    Loading