Security engineering in an evolutionary acquisition environment

Abstract

This paper describes the integration of the Systems Security Engineering (SSE) process into the Evolutionary Acquisition (EA) strategy. Spurred by inadequacies of traditional acquisition strategies, large system acquisitions are using E A in the Department of Defense and the Federal Aviation Administration (FAA); this paper focuses on the FAA. Following an introduction to EA, the waterfall and spiral system development models are presented as background. Security engineering is developed as a special case of the spiral model and integrated with EA.