Secure Design: A Principled Approach for Systems Engineers

Abstract INCOSE's Systems Engineering Vision 2035 sets a goal that security will be as foundational a perspective in systems design as system performance and safety are today. Such a design needs to be inherently secure (i.e., eliminate hazards, susceptibilities, and vulnerabilities to the extent possible and control the remaining ones are, while still enabling the system to meet performance requirements) and provide a basis for necessary security functionality. This paper discusses a principled approach and concepts for creating such a design. Activities for secure design across multiple MITRE sponsors and work programs with desired outcomes to the Vision 2035 goal inform. These activities include community outreach through workshops and public review of publications.