Engineering Trustworthy Secure Systems

Published

November 16, 2022

Author(s)

Ronald S. Ross, Mark Winstead, Michael McEvilley

Abstract

This publication describes a basis for establishing principles, concepts, activities, and tasks for engineering trustworthy secure systems. Such principles, concepts, activities, and tasks can be effectively applied within systems engineering efforts to foster a common mindset to deliver security for any system, regardless of the system's purpose, type, scope, size, complexity, or the stage of its system life cycle. The intent of this publication is to advance systems engineering in developing trustworthy systems for contested operational environments (generally referred to as systems security engineering) and to serve as a basis for developing educational and training programs, professional certifications, and other assessment criteria.

Citation

Special Publication (NIST SP) - 800-160v1r1

Report Number

800-160v1r1

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-160v1r1

Local Download

Keywords

assurance, developmental engineering, engineering trades, field engineering, implementation, information security, information security policy, inspection, integration, penetration testing, protection needs, requirements analysis, resilience, review, risk assessment, risk management, risk treatment, security architecture, security design, security requirements, specifications, stakeholders, system of systems, system component, system element, system life cycle, systems, systems engineering, systems security engineering, trustworthiness, validation, verification

Citation

Ross, R. , Winstead, M. and McEvilley, M. (2022), Engineering Trustworthy Secure Systems, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-160v1r1, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=935739 (Accessed October 27, 2025)