A Comprehensive Safety, Security, and Serviceability Assessment Method

Macher, Georg; Höller, Andrea; Sporer, Harald; Armengaud, Eric; Kreiner, Christian

doi:10.1007/978-3-319-24255-2_30

Cited by 15 publications

(17 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Ten out of those studies 74–83 were discussing architecture modeling. Twenty‐four studies 84–107 were discussing architecture analysis. Fourteen studies 77,108–120 were discussing how to make architectural design of systems both safe and secure through modeling and analysis.…”

Section: Mapping Study Resultsmentioning

confidence: 99%

“…are hazard analysis and threat modeling approaches. The use of STRIDE is mentioned alone in Preschern et al 85,100 and in combination with SAHARA in Macher et al 92,93 The use of SAHARA with FMVEA is mentioned in Dobaj et al 99 Another approach relatively popular in this domain is based on Goal Structuring Notation (GSN) and safety cases. The use of these notations has been found in seven studies.…”

Section: Methods and Tools (Rq2)mentioning

confidence: 99%

See 1 more Smart Citation

Model‐driven engineering of safety and security software systems: A systematic mapping study and future research directions

Mashkoor

Egyed

Wille

et al. 2022

J Software Evolu Process

View full text Add to dashboard Cite

This article presents a systematic mapping study on the model-driven engineering of safety and security concerns in software systems. Combined modeling and development of both safety and security concerns is an emerging field of research as both concerns affect one another in unique ways. Our mapping study provides an overview of the current state of the art in this field. This study carefully selected 143 publications out of 27,259 relevant papers through a rigorous and systematic process. This study then proposes and answers questions such as frequently used methods and tools and development stages where these concerns are typically investigated in application domains. Additionally, we identify the community's preference for publication venues and trends. The discussion on obtained results also features the gained insights and future research directions.

show abstract

Section: Mapping Study Resultsmentioning

confidence: 99%

Section: Methods and Tools (Rq2)mentioning

confidence: 99%

Model‐driven engineering of safety and security software systems: A systematic mapping study and future research directions

Mashkoor

Egyed

Wille

et al. 2022

J Software Evolu Process

View full text Add to dashboard Cite

show abstract

Section: Related Workmentioning

confidence: 99%

“…Methods suggested in [24] Systems dependability features are thus challenging research domains, which require a continuous development process and mutual domain expertise. Dependable systems rely on mature quality management and development methods such as requirements / systems engineering, system analyses (e.g., FMEA), design and validation plans.…”

Section: Figure 1 Overview Of Dependability Attributes and Analysismentioning

confidence: 99%

Signal-Layer Security and Trust-Boundary Identification based on Hardware-Software Interface Definition

Macher¹,

Sporer²,

Brenner³

et al. 2018

JUSPN

Self Cite

View full text Add to dashboard Cite

An important trend in the automotive domain is to adapt established functional safety processes and methods for security engineering. Although functional safety and cyber-security engineering have a considerable overlap, the trend of adapting methods from one domain to the other is often challenged by non-domain experts. Just as safety became a critical part of the development in the late 20th century, modern vehicles are now required to become resilient against cyber-attacks. As vehicle providers gear up for this challenge, they can capitalize on experiences from many other domains, but must also face several unique challenges. Such as, that cyber-security engineering will now join reliability and safety as a cornerstone for success in the automotive industry and approaches need to be integrated into the mainly safety oriented development lifecycle of the domain. The recently released SAE J3061 guidebook for cyber-physical vehicle systems focus on designing cyber-security aware systems in close relation to the automotive safety standard ISO 26262. The key contribution of this paper is to analyse a method to identify attack vectors on complex automotive systems via signal interfaces and propose a security classification scheme and protection mechanisms on signal layer.To that aim, the hardware-software interface (HSI), a central development artefact of the ISO 26262 functional safety development process, is used and extended to support the cyber-security engineering process and provide cyber-security countermeasures on signal layer.

show abstract

“…Fig. 1 provides an overview of the attributes (aspects) of dependability, the analysis methods available for the automotive domain for the different attributes as suggested in [24], and a common dependable development block indicating the fact that each aspect needs to be addressed within a consistent engineering framework. Systems dependability features are thus challenging research domains, which require a continuous development process and mutual domain expertise.…”

Section: Related Workmentioning

confidence: 99%

Untitled

2018

JUSPN

View full text Add to dashboard Cite

An important trend in the automotive domain is to adapt established functional safety processes and methods for security engineering. Although functional safety and cyber-security engineering have a considerable overlap, the trend of adapting methods from one domain to the other is often challenged by non-domain experts. Just as safety became a critical part of the development in the late 20th century, modern vehicles are now required to become resilient against cyber-attacks. As vehicle providers gear up for this challenge, they can capitalize on experiences from many other domains, but must also face several unique challenges. Such as, that cyber-security engineering will now join reliability and safety as a cornerstone for success in the automotive industry and approaches need to be integrated into the mainly safety oriented development lifecycle of the domain. The recently released SAE J3061 guidebook for cyber-physical vehicle systems focus on designing cyber-security aware systems in close relation to the automotive safety standard ISO 26262. The key contribution of this paper is to analyse a method to identify attack vectors on complex automotive systems via signal interfaces and propose a security classification scheme and protection mechanisms on signal layer. To that aim, the hardware-software interface (HSI), a central development artefact of the ISO 26262 functional safety development process, is used and extended to support the cyber-security engineering process and provide cyber-security countermeasures on signal layer.

show abstract

A Comprehensive Safety, Security, and Serviceability Assessment Method

Cited by 15 publications

References 7 publications

Model‐driven engineering of safety and security software systems: A systematic mapping study and future research directions

Model‐driven engineering of safety and security software systems: A systematic mapping study and future research directions

Signal-Layer Security and Trust-Boundary Identification based on Hardware-Software Interface Definition

Untitled

Contact Info

Product

Resources

About