A Combined Safety-Hazards and Security-Threat Analysis Method for Automotive Systems

Macher, Georg; Höller, Andrea; Sporer, Harald; Armengaud, Eric; Kreiner, Christian

doi:10.1007/978-3-319-24249-1_21

Cited by 35 publications

(34 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The steps involved in the SAHARA method [4] are as follows: I. The ISO 26262 -Hazard Analysis and Risk Assessment (HARA) approach is used in a conventional manner to classify the safety hazards according to the Automotive Safety Integrity Level (ASIL), and to identify the safety goal and safe state for each identified potential hazard; II.…”

Section: Sahara Methodsmentioning

confidence: 99%

“…The attack vectors of the system are modelled. The STRIDE method is used to model the attack vectors of the system [4,19]; III. The security threats are quantified according to the Required Resources (R), Required Know-how (K), and Threat Criticality (T); IV.…”

Section: Sahara Methodsmentioning

confidence: 99%

“…Year Country Citations EFT [10] 2009 Italy 63 Extended CFT [9] 2013 Germany 17 FACT Graph [6] 2015 Singapore 5 CHASSIS [5] 2015 Austria 4 FMVEA [7] 2014 Austria 4 SAHARA [4] 2015 Austria 2 Unified Security and Safety Risk Assessment [8] 2014 Taiwan 1…”

Section: Integrated Safety and Security Risk Assessment Methodsmentioning

confidence: 99%

“…In the recent years, we have seen a transformation among the researchers of safety and security community to work together especially in risk management. As an example, there are developments of integrated safety and security risk assessment methods [4,5,6,7,8,9,10]. Risk assessment is one of the most crucial parts of the risk management process as it is the basis for making risk treatment decisions [11].…”

Section: Introductionmentioning

confidence: 99%

“…We included methods such as Failure Mode, Vulnerabilities, and Effect Analysis (FMVEA) [7], Extended Component Fault Tree (CFT) [9], and Extended Fault Tree (EFT) [10] from Kriaa et al in our work as they satisfy our selection criteria. In addition, we included other methods that satisfy our selection criteria, such as Security-Aware Hazard Analysis and Risk Assessment (SAHARA) [4], Combined Harm Assessment of Safety and Security for Information Systems (CHASSIS) [5], Failure-Attack-CountTermeasure (FACT) Graph [6], and Unified Security and Safety Risk Assessment [8].…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Integrated Safety and Security Risk Assessment Methods: A Survey of Key Characteristics and Applications

Chockalingam

Hadžiosmanović²,

Pieters

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Over the last years, we have seen several security incidents that compromised system safety, of which some caused physical harm to people. Meanwhile, various risk assessment methods have been developed that integrate safety and security, and these could help to address the corresponding threats by implementing suitable risk treatment plans. However, an overarching overview of these methods, systematizing the characteristics of such methods, is missing. In this paper, we conduct a systematic literature review, and identify 7 integrated safety and security risk assessment methods. We analyze these methods based on 5 different criteria, and identify key characteristics and applications. A key outcome is the distinction between sequential and non-sequential integration of safety and security, related to the order in which safety and security risks are assessed. This study provides a basis for developing more effective integrated safety and security risk assessment methods in the future.

show abstract

Section: Sahara Methodsmentioning

confidence: 99%

Section: Sahara Methodsmentioning

confidence: 99%

Section: Integrated Safety and Security Risk Assessment Methodsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Integrated Safety and Security Risk Assessment Methods: A Survey of Key Characteristics and Applications

Chockalingam

Hadžiosmanović²,

Pieters

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

A Proposal for Model‐Based Systems Engineering Method for Creating Secure Cyber‐Physical Systems

Larsen,

Kokkula,

Muller

2024

INCOSE International Symp

View full text Add to dashboard Cite

Rising levels of risk as cyber‐attackers look to exploit system vulnerabilities threatens the Air Traffic Control industry. Attacks on Air Navigation Service Providers' communications systems may lead to airspace closure and even cause safety issues. This paper presents a novel Model‐Based Systems Engineering method that enables systems engineers, in collaboration with system security and software engineers, to perform threat‐modeling analysis of cyber‐physical systems early in the system development process and incorporate mitigation strategies into the system design. The proposed model‐based method covers few security concepts, including misuse cases, system assets, threats, risks, vulnerabilities, and security control identification. The study found that the proposed method is suitable for conducting security analysis for complex cyber‐physical systems early in the system development process.

show abstract

A goal‐driven approach for the joint deployment of safety and security standards for operators of essential services

Ponsard

Grandclaudon

Massonet

2021

J Software Evolu Process

View full text Add to dashboard Cite

Summary Designing safety‐critical software in domains ensuring essential services like transportation, energy, or health requires high assurance techniques and compliance with domain specific standards. As a result of the global interconnectivity and the evolution toward cyber‐physical systems, the increasing exposure to cyber threats calls for the adoption of cyber security standards and frameworks. Although safety and security have different cultures, both fields share similar concepts and tools and are worth being investigated together. This paper provides the background to understand emerging co‐engineering approaches. It advocates for the use of a model‐based approach to provide a sound risk‐oriented process and to capture rationales interconnecting top‐level standards/directives to concrete safety/security measures. We show the benefits of adopting goal‐oriented analysis that can be transposed later to domain‐specific frameworks. Both qualitative and quantitative reasoning aspects are analyzed and discussed, especially to support trade‐off analysis. Our work is driven by a representative case study in drinking water utility in the scope of the NIS regulation for operator of essential services.

show abstract

A Combined Safety-Hazards and Security-Threat Analysis Method for Automotive Systems

Cited by 35 publications

References 8 publications

Integrated Safety and Security Risk Assessment Methods: A Survey of Key Characteristics and Applications

Integrated Safety and Security Risk Assessment Methods: A Survey of Key Characteristics and Applications

A Proposal for Model‐Based Systems Engineering Method for Creating Secure Cyber‐Physical Systems

A goal‐driven approach for the joint deployment of safety and security standards for operators of essential services

Contact Info

Product

Resources

About