NDLI: Merging safety and cybersecurity analysis in product design

Content Provider	IET Digital Library
Author	Suo, Dajiang Siegel, Joshua E. Sarma, Sanjay E.
Abstract	When developing cyber-physical systems such as automated vehicles, safety and cybersecurity analyses are often conducted separately. However, unlike in the IT world, safety hazards and cybersecurity threats converge in cyber-physical systems; a malicious party can exploit cyber-threats to create extremely hazardous situations, whether in autonomous vehicles or nuclear plants. The authors propose a framework for integrated system-level analyses for functional safety and cyber security. They present a generic model named Threat Identification and Refinement for Cyber-Physical Systems (TIRCPS) extending Microsoft's six classes of threat modelling including Spoofing, Tampering, Repudiation, Information Disclosure, Denial-of-Service and Elevation Privilege. TIRCPS introduces three benefits of developing complex systems: first, it allows the refinement of abstract threats into specific ones as physical design information becomes available. Second, the approach provides support for constructing attack trees with traceability from high-level goals and hazardous events (HEs) to threats. Third, TIRCPS formalises the definition of threats such that intelligent tools can be built to automatically detect most of a system's vulnerable components requiring protection. They present a case study on an automated-driving system to illustrate the proposed approach. The analysis results of a hierarchical attack tree with cyber-threats traceable to high-level HEs are used to design mitigation solutions.
Starting Page	1103
Ending Page	1109
Page Count	7
ISSN	1751956X
Volume Number	12
e-ISSN	17519578
Issue Number	Issue 9, Nov (2018)
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/iet-its/12/9
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/10.1049/iet-its.2018.5323
Journal	IET Intelligent Transport Systems
Publisher Date	2018-07-26
Access Restriction	Open
Rights Holder	© The Institution of Engineering and Technology
Subject Keyword	Abstract Threats Refinement Automated Vehicle Automated-driving System Autonomous Vehicle Cyber-physical System Cyber-threats Cybersecurity Analysis Data Security Denial-of-service Elevation Privilege Extremely Hazardous Situations Functional Safety Analysis Hazardous Events Hazards Hierarchical Attack Tree Information Disclosure Intelligent Tool Malicious Party Microsoft Nuclear Plant Physical Design Information Product Design Repudiation Security of Data Spoofing System-level Analysis Tampering Threat Identification-and-refinement-for-cyber-physical System Threat Modelling TIRCPS
Content Type	Text
Resource Type	Article
Subject	Law Transportation Environmental Science Mechanical Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Sustainability as a criterion for information security in cyber-physical systems

Automated ICS template for STRIDE Microsoft Threat Modeling Tool

Threats to Information Protection - Industry and Academic Perspectives: An annotated bibliography

Securing cyber-physical robotic systems for enhanced data security and real-time threat mitigation

New Threats to Vehicle Safety: How Cybersecurity Policy Will Shape the Future of Autonomous Vehicles

Avoidance of Cybersecurity Threats with the Deployment of a Web-Based Blockchain-Enabled Cybersecurity Awareness System

The Missing Case of Disinformation from the Cybersecurity Risk Continuum: A Comparative Assessment of Disinformation with Other Cyber Threats

IntruDTree: A Machine Learning Based Cyber Security Intrusion Detection Model

Insights into Organizational Security Readiness: Lessons Learned from Cyber-Attack Case Studies

Merging safety and cybersecurity analysis in product design

Similar Documents

Sustainability as a criterion for information security in cyber-physical systems

Automated ICS template for STRIDE Microsoft Threat Modeling Tool

Threats to Information Protection - Industry and Academic Perspectives: An annotated bibliography

Securing cyber-physical robotic systems for enhanced data security and real-time threat mitigation

New Threats to Vehicle Safety: How Cybersecurity Policy Will Shape the Future of Autonomous Vehicles

Avoidance of Cybersecurity Threats with the Deployment of a Web-Based Blockchain-Enabled Cybersecurity Awareness System

The Missing Case of Disinformation from the Cybersecurity Risk Continuum: A Comparative Assessment of Disinformation with Other Cyber Threats

IntruDTree: A Machine Learning Based Cyber Security Intrusion Detection Model

Insights into Organizational Security Readiness: Lessons Learned from Cyber-Attack Case Studies

Merging safety and cybersecurity analysis in product design