On the engineering of survivable systems

The reliance on distributed computing for critical software functionality coupled with the increase in attacks and points of failure illustrate the importance of information assurance. Additionally, the engineering approach for information systems has a significant effect on the quality of the resulting system. This illustrates the importance of an engineering framework designed to incorporate the latest survivability techniques and methodologies for constructing information systems. A comprehensive framework incorporates the survivability paradigm as its goal for information assurance. This includes engineering methods related to the survivability requirements including those of non-functional requirements and the aspect-oriented paradigm. The work in this study extends the Security Quality Requirements Engineering methodology with the Non-Functional Requirement framework as an engineering approach for survivable systems. It also provides a means for translating the softgoal interdependency graph in the nonfunctional requirements framework into aspect design constructs. The outcome is a framework that bridges the gap between existing approaches resulting in a comprehensive framework that addresses the engineering concerns of each cycle of the development process.