Disruption-free software updates in automation systems

Wahler, Michael; Manuel, Oriol

doi:10.1109/etfa.2014.7005075

Cited by 14 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, number of studies have mentioned additional tools including Jrebel [42, 46, 48, 53, 91 ], LUCOS [22, 51, 76, 79, 94 ], Javelus [35, 40, 42, 44 ], JavAdaptor [16, 38, 46, 52 ], DVM [4, 42, 44, 52 ], HotSwap [16, 42, 50, 57 ], DynaMOS [51, 76, 78, 105 ], Dlpop [37, 39, 106 ], Mx [83, 88, 90 ], EcoDSU [106, 108 ], PROTEOS [51, 95 ], Ekiden [6, 105 ], lusagent [59, 84 ], DYMOS [22, 47 ], EmbedDSU [106, 112 ], UpgradeJ [4, 47 ], Prose [41, 57 ], REPLUS [76, 113 ], FASA [65, 106 ], and Adapt.net [59, 68 ].…”

Section: Resultsmentioning

confidence: 99%

“…In this study, we have identified existing types of states, techniques to define states, and techniques for states transformations in DSU as follows: A. Existing types of statesA group of studies have highlighted a group of 15 states that gets attention in DSU including initial state [9, 29, 36, 58, 64, 83, 95, 102, 104, 122, 128 ], quiescent state [5, 9, 40, 65, 83, 91, 112, 126 ], heap state [36, 39, 42, 87, 95, 116 ], object state [4, 5, 45, 116 ], shared state [3, 5 ], backward compatibility state [128 ], tranquil state [63 ], old‐version state [39 ], buggy state [83 ], class state [45 ], components state [65 ], deadlock state [102 ], thread states [104 ], inconsistent state [56 ], and multi‐cycle state [65 ]. B. Current techniques to define statesA number of studies have demonstrated 12 techniques to define states in DSU including state transformer [45, 73, 83, 95, 115 ], formalise as state machine [9, 61, 83, 120 ], adaptation [41, 65 ], prepare ready tainted states [101 ], state convergence algorithm [126 ], state‐based specification language […”

Section: Resultsmentioning

confidence: 99%

“…A number of studies have demonstrated 12 techniques to define states in DSU including state transformer [45, 73, 83, 95, 115 ], formalise as state machine [9, 61, 83, 120 ], adaptation [41, 65 ], prepare ready tainted states [101 ], state convergence algorithm [126 ], state‐based specification language [83 ], enforcing restrictions [116 ], model checkers [83 ], using check points [37 ], custom state transfer [116 ], convert states bi‐directionally [42 ], and event‐based [66 ].…”

Section: Resultsmentioning

confidence: 99%

“…In addition, further studies demonstrated additional state transformation techniques including customisation [116 ], atomic transformation [83 ], switching [67 ], coexisting transformation [67 ], hybrid executions [128 ], state relocation [48 ], multi‐cycle transfer [65 ], executing from initial states [104 ], transfer the state of components [126 ], dynamic reference using containers [131 ], transferring when load [126 ], garbage collector [118 ], change class hierarchy [16 ], automatically reach state [64 ], automating object transformations [36 ], replacements [41 ], multi‐level mediator‐based [85 ], dynamic object binding [38 ], and dynamic redefinition [55 ].…”

Section: Resultsmentioning

confidence: 99%

See 3 more Smart Citations

Dynamic software updating: a systematic mapping study

Ahmed

Lee

et al. 2020

IET softw.

View full text Add to dashboard Cite

Dynamic software updating (DSU) is shifting gears to modify software systems without a halt. Even though extensive research has been conducted on DSU, it is necessary to synthesise and map the results of recent studies on DSU for prospective research highlights. This study aims to highlight the current state‐of‐the‐art, to recognise trends, and to identify existing open issues in DSU. A systematic mapping study (SMS) was conducted with a set of six research questions. A total of 1066 papers published from 2005 to 2019 were recorded. After a filtering process, 112 primary studies were selected and inspected. This study highlights the current state‐of‐the‐art of DSU including approaches, tools, models, and techniques. Also, this study outlines application domains, research type, and contributions type facets in DSU. In addition, this study demonstrates benchmarks, datasets, evaluation metrics, and existing open issues for future research in DSU. The results of this investigation can be used to highlight current state‐of‐the‐art of DSU, to show trends of DSU, and to demonstrate existing open issues in DSU.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Resultsmentioning

confidence: 99%

Section: Resultsmentioning

confidence: 99%

Section: Resultsmentioning

confidence: 99%

See 2 more Smart Citations

Dynamic software updating: a systematic mapping study

Ahmed

Lee

et al. 2020

IET softw.

View full text Add to dashboard Cite

show abstract

“…FASA allows engineers to automatically distribute and execute an arbitrary number of control applications on an arbitrary number of controllers [1]. FASA is also highly dynamic as it allows engineers to reconfigure the system at runtime, e.g., by adding additional controllers or replacing function block code [5].…”

Section: A Next-generation Dynamic Control Systemmentioning

confidence: 99%

Automatic attack surface reduction in next-generation industrial control systems

Obermeier

Wahler

Sivanthi

et al. 2014

2014 IEEE Symposium on Computational Intelligence in Cyber Security (CICS)

Self Cite

View full text Add to dashboard Cite

Industrial control systems are often large and complex distributed systems and therefore expose a large potential attack surface. Effectively minimizing this attack surface requires security experts and significant manpower during engineering and maintenance of the system. This task, which is already difficult for today's control systems, will become significantly more complex for tomorrow's systems, which can reconfigure themselves dynamically, e.g., if hardware failures occur.In this article, we present a dynamic security system which can automatically minimize the attack surface of a control system's communication network. This security system is specifically designed for next-generation industrial control systems, but can also be applied in current generation systems. The presented security system adapts the necessary parameters of network and security controls according to the underlying changes in the control system environment. This ensures a better cyber security resilience against system compromise and reduces the attack surface because security controls will only allow data transfer that is required by the control application. Our evaluations for a next generation industrial control system and a current generation substation automation system show that the attack surface can be reduced by up to 90%, depending on the size and actual configuration of the control system.

show abstract

Cetratus: A framework for zero downtime secure software updates in safety‐critical systems

2020

View full text Add to dashboard Cite

SummarySafety‐critical systems are evolving into complex, networked, and distributed systems. As a result of the high interconnectivity among all networked systems and of potential security threats, security countermeasures need to be incorporated. Nonetheless, albeit cutting‐edge security measures are adopted and incorporated during the system development, such as latest recommended encryption algorithms, these protection mechanisms may turn out obsolete because of the long operational periods. New security flaws and bugs are continuously detected. Software updates are then essential to restore the security level of the system. However, system shutdowns may not be acceptable when high availability is required. As expressed by the European Union Agency for Network and Information Security (ENISA) “the research in the area of patching and updating equipment without disruption of service and tools” is needed. In this article, a novel live updating approach for zero downtime safety‐critical systems named Cetratus is presented. Cetratus, which is based on a quarantine‐mode execution and monitoring, enables the update of non‐safety‐critical software components while running, without compromising the safety integrity level of the system. The focus of this work lies on the incorporation of leading‐edge security mechanisms while safety‐related software components will remain untouched. Other non‐safety‐related software components could also be updated.

show abstract

Disruption-free software updates in automation systems

Cited by 14 publications

References 14 publications

Dynamic software updating: a systematic mapping study

Dynamic software updating: a systematic mapping study

Automatic attack surface reduction in next-generation industrial control systems

Cetratus: A framework for zero downtime secure software updates in safety‐critical systems

Contact Info

Product

Resources

About