On Computer-Aided Techniques for Supporting Safety and Security Co-Engineering
| Autor: | Carmen Carlan, Antoaneta Kondeva, Vivek Nigam, Harald Ruess |
|---|---|
| Rok vydání: | 2019 |
| Předmět: |
Fault tree analysis
021110 strategic defence & security studies 021103 operations research Lead (geology) Risk analysis (engineering) Computer science 0211 other engineering and technologies Computer-aided Key (cryptography) 02 engineering and technology Hazard analysis Interconnectivity Relevant information |
| Zdroj: | 2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) ISSRE Workshops |
| DOI: | 10.1109/issrew.2019.00095 |
| Popis: | With the increasing system interconnectivity, cyberattacks on safety-critical systems can lead to catastrophic events. This calls for a better safety and security integration. Indeed, a safety assessment contains security relevant information, such as, key safety hazards, that shall not be triggered by cyber-attacks. Guidelines, such as, SAE J3061 and ED202A, already recommend to exchange information gathered by safety and security engineers during different phases of development. However, these guidelines do not specify exactly how and which information shall be exchanged. We propose a methodology for enabling computer aided techniques for extracting security relevant information from safety analysis. In particular, we propose techniques for automatically constructing Attack Trees from safety artefacts such as fault trees, hazard analysis and safety patterns. Lastly, we illustrate these techniques on an Industry 4.0 application. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|