Geodesic
Cyber immune development approach. Microservices based illustration
Vestnik Sankt-Peterburgskogo universiteta. Prikladnaâ matematika, informatika, processy upravleniâ, Tome 20 (2024) no. 1, pp. 52-61
Cet article a éte moissonné depuis la source Math-Net.Ru

Voir la notice de l'article

The author believes, that ensuring the information security of systems should begin at the design stage, rather than after implementation is over and verification starts. Also the author supports the point of view, that it is impossible to guarantee absolute information security, eliminate all defects and vulnerabilities from code once and forever. It is more realistic to assume that there are software defects are present in the inner permimeter of any system and the main question is how critical this issue will be for the systems customer assets. Developers shall focus their efforts in design and implementation in such a way that probability of successful attacks compromising system security objectives through critical code is minimal. Also such critical parts are defined and optimised for size and complexity during design phase, separated from non-critical parts, substantial efforts are invested in high qualirty implementation and thorough testing of such critical parts. The article describes how built-in protection against vulnerabilities and attacks can be illustrated using microservices-based architecture.
Keywords: cyber immunity, systems engineering, systems design, secure software development.
Mots-clés : microservices 
@article{VSPUI_2024_20_1_a4,
     author = {S. P. Sobolev},
     title = {Cyber immune development approach. {Microservices} based illustration},
     journal = {Vestnik Sankt-Peterburgskogo universiteta. Prikladna\^a matematika, informatika, processy upravleni\^a},
     pages = {52--61},
     year = {2024},
     volume = {20},
     number = {1},
     language = {ru},
     url = {http://geodesic.mathdoc.fr/item/VSPUI_2024_20_1_a4/}
}
TY  - JOUR
AU  - S. P. Sobolev
TI  - Cyber immune development approach. Microservices based illustration
JO  - Vestnik Sankt-Peterburgskogo universiteta. Prikladnaâ matematika, informatika, processy upravleniâ
PY  - 2024
SP  - 52
EP  - 61
VL  - 20
IS  - 1
UR  - http://geodesic.mathdoc.fr/item/VSPUI_2024_20_1_a4/
LA  - ru
ID  - VSPUI_2024_20_1_a4
ER  - 
%0 Journal Article
%A S. P. Sobolev
%T Cyber immune development approach. Microservices based illustration
%J Vestnik Sankt-Peterburgskogo universiteta. Prikladnaâ matematika, informatika, processy upravleniâ
%D 2024
%P 52-61
%V 20
%N 1
%U http://geodesic.mathdoc.fr/item/VSPUI_2024_20_1_a4/
%G ru
%F VSPUI_2024_20_1_a4
S. P. Sobolev. Cyber immune development approach. Microservices based illustration. Vestnik Sankt-Peterburgskogo universiteta. Prikladnaâ matematika, informatika, processy upravleniâ, Tome 20 (2024) no. 1, pp. 52-61. http://geodesic.mathdoc.fr/item/VSPUI_2024_20_1_a4/

[1] GOST R IEC 62443-3-3-2016. Industrial communication networks. Network and system security. Pt 3-3. System security requirements and security levels, Standardinform Publ., M., 2016, 62 pp. (In Russian)

[2] Security by Design, Kaspersky Lab. Publ., M., 2023, 2 pp. (In Russian) https://os.kaspersky.ru/blog/security-by-design

[3] DeLong R. J., Rudina E., MILS architectural approach supporting trustworthiness of the IIoT solutions: IIC whitepaper, Industrial Internet Consortium, Boston, 2021, 94 pp.

[4] Spencer R., Smalley S. D., Loscocco P., Hibler M., Andersen D. G., Lepreau J., The Flask security architecture: system support for diverse security policies, USENIX Security Symposium, Washington, 1999, 17 pp.