DI-MISC-80841_Security_Vulnerability_Analysis.docx

Data Item Description DOCX document 17 KB Posted

Attached to
Information Assurance and Certification and Accreditation
Solicitation number
N64267-14-T-0202
Issued by

About this file

DID FOR CDRL 004

View the file

Other versions and copies of DI-MISC-80841

Who attaches DI-MISC-80841

Other files

Show all 11

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DATA ITEM DESCRIPTION

Title: SECURITY VULNERABILITY ANALYSIS

Number: DI-MISC-80841
Approval Date: 19890605
AMSC Number: F4732
Limitation: N/A

DTIC Applicable: Yes Defense Technical Information Center Cameron Station Alexandria, VA 22314-6100 GIDEP Applicable: N/A

Office of Primary Responsibility: AF 10

Applicable Forms: N/A

Use/relationship: The Security Vulnerability Analysis provides the result of the contractor’s efforts to quantitatively and qualitatively define system security functional requirements and residual clandestine vulnerabilities. It will be classified no lower than Secret NOFORN or Secret Restricted Data, as applicable. This analysis contributes to the security vulnerability analysis.

Application / Interrelationship:

This Data Item Description supersedes DI-R-3528/S-113-1.

This Data Item Description is used in conjunction with the System Security Management Plan (SSMP) DI-MISC-80839.

Requirements:

1. Reference documents. The applicable issue of the documents cited herein, including their approval dates and dates of any applicable amendments, notices, and revisions, shall be as cited in DISTRIBUTION STATEMENT A. Approved for public release: distribution is unlimited.

2. Format. This Data Item Description contains the format and content preparation instructions for data resulting from the work task described by 5.3.1.9 of MIL-STD-1785

3. Content. The Security Vulnerability Analysis shall include:

a. A preface with narrative description of the system. Information concerning each form of external overt or covert method of attack against the system considered during system development.

b. Treat models in Threat Logic Tree format showing their transition from preliminary to initial Threat Logic Trees and thence into Summary Threat matrix form.

c. Rationale used for threat rejection in developing the initial Threat Logic Tree.

d. An evaluation of the conditional probabilities for achieving each adversary mission objective.

e. An assessment of security vulnerabilities related to information security, personnel security, industrial security, operations security, communications security, physical security, computer security, product security and tempest.

4. End of DI-MISC-80841.

File details come from the government source that posted it. Updated .