When developing cyber‐physical systems such as automated vehicles, safety and cybersecurity analyses are often conducted separately. However, unlike in the IT world, safety hazards and cybersecurity threats converge in cyber‐physical systems; a malicious party can exploit cyber‐threats to create extremely hazardous situations, whether in autonomous vehicles or nuclear plants. The authors propose a framework for integrated system‐level analyses for functional safety and cyber security. They present a generic model named Threat Identification and Refinement for Cyber‐Physical Systems (TIRCPS) extending Microsoft's six classes of threat modelling including Spoofing, Tampering, Repudiation, Information Disclosure, Denial‐of‐Service and Elevation Privilege. TIRCPS introduces three benefits of developing complex systems: first, it allows the refinement of abstract threats into specific ones as physical design information becomes available. Second, the approach provides support for constructing attack trees with traceability from high‐level goals and hazardous events (HEs) to threats. Third, TIRCPS formalises the definition of threats such that intelligent tools can be built to automatically detect most of a system's vulnerable components requiring protection. They present a case study on an automated‐driving system to illustrate the proposed approach. The analysis results of a hierarchical attack tree with cyber‐threats traceable to high‐level HEs are used to design mitigation solutions.
Merging safety and cybersecurity analysis in product design
IET Intelligent Transport Systems ; 12 , 9 ; 1103-1109
2018-11-01
7 pages
Article (Journal)
Electronic Resource
English
Microsoft , TIRCPS , physical design information , automated‐driving system , elevation privilege , malicious party , functional safety analysis , product design , cyber‐physical systems , automated vehicles , intelligent tools , hazards , autonomous vehicles , cyber‐threats , tampering , extremely hazardous situations , system‐level analysis , spoofing , information disclosure , cybersecurity analysis , security of data , hierarchical attack tree , denial‐of‐service , threat identification‐and‐refinement‐for‐cyber‐physical systems , abstract threats refinement , repudiation , hazardous events , threat modelling , nuclear plants
Cybersecurity and Human Spaceflight Safety
IEEE | 2023
|Automotive SPICE, Safety and Cybersecurity Integration
British Library Conference Proceedings | 2017
|SAE Technical Papers | 2023
|