In order to better understand the differences between various flaw selection strategies, and to simplify comparative studies, Pollack et al. (1997) proposed a unifying notation for specifying flaw selection strategies. We adopt their notation with only slight modifications.
A flaw selection strategy is an ordered list of selection criteria. Each selection criterion is of the form
Pollack et al. define the flaw types ``o'' (open condition), ``n'' (non-separable threat), and ``s'' (separable threat). They also define the ordering criteria ``LIFO'', ``FIFO'', ``R'' (random), ``LR''3 (least refinements first), and ``New''. The last one applies only to open conditions, and gives preference to open conditions that can be resolved by adding a new action. The rest apply to both open conditions and threats.
Flaws are matched with selection criteria, and it is required for completeness that every flaw matches at least one selection criterion in a flaw selection strategy. The flaw that matches the earliest selection criterion, and is ordered before any other flaws matching the same criterion (according to the ordering criterion), is the flaw that gets selected by the flaw selection strategy. Note that we do not always need to test all flaws. If, for example, the first selection criterion is {n, s}LIFO, and we have found a threat, then we do not need to consider any other flaws for selection.
Using this notation, we can specify many different flaw selection strategies in a concise manner. Table 3 specifies the flaw selection strategies mentioned earlier. A summary of flaw types recognized by VHPOP, including three new flaw types defined below, is given in Table 4.
|
Håkan L. S. Younes