The framework provides a basis to address, fundamentally, every weakness in a given network. Furthermore, it applies to every level of the network, starting at the highest network-of-networks level and descending to the single computing node that maintains connections with other nodes. Thus, the framework enables the understanding of the security posture of an individual network in a comprehensive manner, the comparative evaluation of the security of two or more networks, and the determination of the resulting security of a composite network that is formed from connecting two or more networks with known security.

The value of the proposed framework is that it stimulates network designers to examine the vulnerabilities of all eight pillars even when they may appear iticon sequential. This constitutes the first use of the framework. For instance, while a credit card network operating on the Internet may successfully address the privacy attribute and feel secure, malicious agents may penetrate the network and reduce availability such that customers are prevented from making purchases. An exam- ¡nation of the performance pillar may be advisable under these circumstances. In a different scenario, while the military assigns resources to ensure the privacy and connectivity attributes, a disgruntled employee may send an unauthorized mes sage, under an assumed identification, to the finance and accounting military pay program, take advantage of a weakness in the accountability attribute, and deny hundreds of thousands of soldiers their pay on time.

The procedure for determining a rating for a given network consists of the following. For a given standard threat level, relative or absolute, and a given environment, the strengths of the intersection points in the matrix are obtained through evaluating t he corresponding mechanisms. The evaluations may assume the form of numerical values,