A framework for quantifying information system survivability

Information system survivability should be analyzed quantitatively for evaluating and grading accurately. A finite state machine whose state is described by a hierarchical structure presents quantification model. To quantify more objectively, a test-based framework is introduced by five key steps based on SNA method, which is achieved by computer´s aid mostly for reducing man factor. Survivability is computed through resistance, recognition and recovery in detail by a hierarchical process. This framework is more practicable for system´s hierarchical state, which avoids dividing the state space.