Security Requirements Engineering in Safety-Critical Railway Signalling Networks
| Autor: | Stefan Katzenbeisser, Markus Heinrich, Sergey Tverdyshev, Andreas Fuchs, Tsvetoslava Vateva-Gurova, Don Kuzhiyelil, Neeraj Suri, Christoph Krauß, Christian Schlehuber, Tolga Arul, Maria Zhdanova, Henk Birkholz |
|---|---|
| Přispěvatelé: | Publica |
| Předmět: |
Requirements engineering
Article Subject Computer Networks and Communications Process (engineering) Computer science 020206 networking & telecommunications 02 engineering and technology Enterprise information security architecture Computer security computer.software_genre Security controls 020204 information systems Component (UML) Railway signalling lcsh:Technology (General) 0202 electrical engineering electronic engineering information engineering lcsh:T1-995 Safety case Architecture lcsh:Science (General) computer Information Systems lcsh:Q1-390 |
| Zdroj: | BASE-Bielefeld Academic Search Engine Security and Communication Networks, Vol 2019 (2019) |
| DOI: | 10.1155/2019/8348925 |
| Popis: | Securing a safety-critical system is a challenging task, because safety requirements have to be considered alongside security controls. We report on our experience to develop a security architecture for railway signalling systems starting from the bare safety-critical system that requires protection. We use a threat-based approach to determine security risk acceptance criteria and derive security requirements. We discuss the executed process and make suggestions for improvements. Based on the security requirements, we develop a security architecture. The architecture is based on a hardware platform that provides the resources required for safety as well as security applications and is able to run these applications of mixed-criticality (safety-critical applications and other applications run on the same device). To achieve this, we apply the MILS approach, a separation-based high-assurance security architecture to simplify the safety case and security case of our approach. We describe the assurance requirements of the separation kernel subcomponent, which represents the key component of the MILS architecture. We further discuss the security measures of our architecture that are included to protect the safety-critical application from cyberattacks. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|