An Effective Security Requirements Engineering Framework for Cyber-Physical Systems

Abstract

Context and motivation: Cyber-Physical Systems (CPSs) are gaining priority over other systems. The heterogeneity of these systems increases the importance of security. Both the developer and the requirement analyst must consider details of not only the software, but also the hardware perspective, including sensor and network security. Several models for secure software engineering processes have been proposed, but they are limited to software; therefore, to support the processes of security requirements, we need a security requirements framework for CPSs. Question/Problem: Do existing security requirements frameworks fulfil the needs of CPS security requirements? The answer is no; existing security requirements frameworks fail to accommodate security concerns outside of software boundaries. Little or even no attention has been given to sensor, hardware, network, and third party elements during security requirements engineering in different existing frameworks. Principal Ideas/results: We have proposed, applied, and assessed an incremental security requirements evolution approach, which configures the heterogeneous nature of components and their threats in order to generate a secure system. Contribution: The most significant contribution of this paper is to propose a security requirements engineering framework for CPSs that overcomes the issue of security requirements elicitation for heterogeneous CPS components. The proposed framework supports the elicitation of security requirements while considering sensor, receiver protocol, network channel issues, along with software aspects. Furthermore, the proposed CPS framework has been evaluated through a case study, and the results are shown in this paper. The results would provide great support in this research direction.

Implementation of Industrial Internet of Things and Cyber-Physical Systems in SMEs for Distributed and Service-Oriented Control

“…Moreover, thanks to the source code availability, OSS gives SMEs the possibility of developing highly customized and lean solutions based on their know-how. As a last remark, we emphasize that a growing amount of companies are providing support to open source IT solutions (Olson et al 2018).…”

“…Among others, we highlight the trade-offs between outsourcing and in-house software development and between open-source software (OSS) and proprietary software tools. OSS is a viable alternative in terms of costs and independence to vendor-locked applications (Olson et al 2018). In fact, OSS does not require vendor-specialized consultants and tools, and allows the use of in-house available hardware and software rather than proprietary ones, subject to maintenance contracts.…”

Development of a methodology for building an information security system in the corporate research and education system in the context of university autonomy

“…In [21], the methodology of preparing the input data set for further analysis using machine learning methods is used to compromise the secret key of the ECC algorithm based on the risk of information leakage on the processor's side channel. The papers [22,23] address the issues of security in the conditions of modern cyber threats to objects of cyberphysics systems (CPS) and Internet of things (IoT) at the software level. However, the use of physical channels of information leakage allows access to the resources of these systems.…”

A Requirement Engineering Framework for Electric Motors Development

“…Literature offers general requirement engineering frameworks [6] as well as specialized in different disciplines [7][8][9]. However, there is a lack of specialized frameworks for electric motor development.…”