Computer system survivability evaluation based on risk analysis

Abstract

Computer system survivability simulation model was composed and computer system survivability simulation was performed in this research. Model parameters were taken from legal regulation and risk analysis. Requirements to the system recovery time and accessibility are set by regulation, based on the computer system category. The simulation was done by using stochastic activity networks. Simulation results show that the modelled computer system security mostly depends on the incident occurrence probability, on the strength of protection mechanisms, while the occurring incident severity has the least effect on the protected computer system.