When developing cyber-physical systems such as automated vehicles, safety and cybersecurity analyses are often conducted separately. However, unlike in the IT world, safety hazards and cybersecurity threats converge in cyber-physical systems; a malicious party can exploit cyber-threats to create extremely hazardous situations, whether in autonomous vehicles or nuclear plants. The authors propose a framework for integrated system-level analyses for functional safety and cyber security. They present a generic model named Threat Identification and Refinement for Cyber-Physical Systems (TIRCPS) extending Microsoft's six classes of threat modelling including Spoofing, Tampering, Repudiation, Information Disclosure, Denial-of-Service and Elevation Privilege. TIRCPS introduces three benefits of developing complex systems: first, it allows the refinement of abstract threats into specific ones as physical design information becomes available. Second, the approach provides support for constructing attack trees with traceability from high-level goals and hazardous events (HEs) to threats. Third, TIRCPS formalises the definition of threats such that intelligent tools can be built to automatically detect most of a system's vulnerable components requiring protection. They present a case study on an automated-driving system to illustrate the proposed approach. The analysis results of a hierarchical attack tree with cyber-threats traceable to high-level HEs are used to design mitigation solutions.
Merging safety and cybersecurity analysis in product design
IET Intelligent Transport Systems ; 12 , 9 ; 1103-1109
2018-08-13
7 pages
Article (Journal)
Electronic Resource
English
threat identification-and-refinement-for-cyber-physical systems , information disclosure , extremely hazardous situations , automated vehicles , security of data , hierarchical attack tree , cybersecurity analysis , autonomous vehicles , system-level analysis , nuclear plants , denial-of-service , malicious party , abstract threats refinement , threat modelling , hazardous events , physical design information , product design , automated-driving system , cyber-threats , repudiation , functional safety analysis , Microsoft , tampering , spoofing , TIRCPS , intelligent tools , hazards , cyber-physical systems , elevation privilege
Metadata by IET is licensed under CC BY 3.0
Cybersecurity and Human Spaceflight Safety
IEEE | 2023
|Automotive SPICE, Safety and Cybersecurity Integration
British Library Conference Proceedings | 2017
|SAE Technical Papers | 2023
|