SAMARA: Security Architecture Multi-Agent-based Risk Assessment

In this paper, we describe SAMARATM, a Security Agent-Based environment for security process design, management, and execution that integrates aspects of security process modeling, security assessment, and security management. SAMARA is targeted specifically to domains such as engineering security design in which the dynamic and uncertain nature of the security processes present management challenges that are unmet by traditional assessment systems. SAMARA applies various AI technologies, including dynamic heuristic security deploying and security assessment throughout security process execution, to these complex security management situations as an alternative to current approaches. SAMARA is designed to balance the need for flexibility and reactivity in security process execution with the need for understandability, accountability and proactive decision making required by human security managers. SAMARA’s goal is not to fully automate the management of design security processes or to limit the options available to security managers. Instead, it provides designers with the ability to specify and incrementally refine security processes. It provides designers and security managers with timely information about what is happening and why and about what might be expected to happen in the security environment. Finally, it automates the routine aspects of security process execution, freeing security designers and security managers alike to do the real work of the e-business.