Computer security in context of test bench risk management

Abstract

Test bench measurement command and control systems (MCC) today are more ore less complex distributed computer systems. Besides the main task of controlling and commanding tests on space hardware there is also the task to perform measurements. At least for evaluation of these measurements there is a need to connect test bench MCC systems to other computer systems. MCC systems have interfaces to external systems, for example network connections to data evaluation systems, media interfaces (USB, CD- Rom, ...) used for example for input of test configurations, and last but not least operator terminals. Through all these interfaces intrusion is possible. MCC systems are normally fixed systems which are updated only over longer periods. On the other hand computer technology is fast changing in the outer world. This results in continuously changing threats. This paper describes the risk management process under the aspects of computer security as the total process to identify, control, and minimize the impact of insecure in- cidents. The process facilitates the management of security risks throughout the system life cycle. The acceptance procedure consists of three elements: risk analysis, certifica- tion, and approval.