DI-MISC-80841_Security_Vulnerability_Analysis.docx

DATA ITEM DESCRIPTION

Title: SECURITY VULNERABILITY ANALYSIS

DTIC Applicable: Yes Defense Technical Information Center Cameron Station Alexandria, VA 22314-6100 GIDEP Applicable: N/A

Office of Primary Responsibility: AF 10

Applicable Forms: N/A

Use/relationship: The Security Vulnerability Analysis provides the result of the contractor’s efforts to quantitatively and qualitatively define system security functional requirements and residual clandestine vulnerabilities. It will be classified no lower than Secret NOFORN or Secret Restricted Data, as applicable. This analysis contributes to the security vulnerability analysis.

Application / Interrelationship:

This Data Item Description supersedes DI-R-3528/S-113-1.

This Data Item Description is used in conjunction with the System Security Management Plan (SSMP) DI-MISC-80839.

Requirements:

1. Reference documents. The applicable issue of the documents cited herein, including their approval dates and dates of any applicable amendments, notices, and revisions, shall be as cited in DISTRIBUTION STATEMENT A. Approved for public release: distribution is unlimited.

2. Format. This Data Item Description contains the format and content preparation instructions for data resulting from the work task described by 5.3.1.9 of MIL-STD-1785

3. Content. The Security Vulnerability Analysis shall include:

a. A preface with narrative description of the system. Information concerning each form of external overt or covert method of attack against the system considered during system development.

b. Treat models in Threat Logic Tree format showing their transition from preliminary to initial Threat Logic Trees and thence into Summary Threat matrix form.

c. Rationale used for threat rejection in developing the initial Threat Logic Tree.

d. An evaluation of the conditional probabilities for achieving each adversary mission objective.

e. An assessment of security vulnerabilities related to information security, personnel security, industrial security, operations security, communications security, physical security, computer security, product security and tempest.

4. End of DI-MISC-80841.