Examining Cybersecurity of Cyberphysical Systems for Critical Infrastructures Through Work Domain Analysis

Abstract

Work domain analysis should be applied to assess cybersecurity risk and inform engineering and user interface design.

On the Evolution of a Radical Concept: Affordances According to Gibson and Their Subsequent Use and Development

“…The term affordance has become overused and in most cases has departed from the original intentions of Gibson (Costall & Morris, 2015). Affordances have now been invoked to explain myriads of research problems such as how different social situations afford certain leisure behaviors in powerful and powerless individuals (Guinote, 2008), two-sided affordances of interactions for different types of health care consultations (Islind et al, 2019), and security affordances of cyber-physical systems (Wang et al, 2018). It is impressive that a term created by one individual has sparked so many research works over the past several decades.…”

“…However, some human factors researchers have taken this situation to be a carte blanche to using terms from ecological psychology. In regard to their model of a cyber-physical system, Wang et al (2018), for instance, noted that their efforts “make apparent to the analysts the security processes and the features afforded [emphasis added] by different control system components . .…”

“…For this reason, it is important not only to delineate the most influential pieces of research that have stemmed from Gibson’s work but also to do so from the lens of cognitive psychology to determine what the field might learn more globally from use of the affordance concept. Although cognitive psychology is but one of several disciplines that have adopted concepts from Gibson (e.g., Wang, Lau, & Gerdes, 2018), attention is directed toward cognitive psychology because it is the dominant approach to human experimental psychology.…”

Systematic literature review on work domains represented by the abstraction hierarchy

“…La catégorie du transport couvre des domaines de travail qui portent sur le transport aérien [1,6,31,44] et ferroviaire [19,32,37]. La catégorie des technologies de l'information couvre des domaines de travail qui portent sur la cybersécurité de systèmes d'acquisition et de contrôle de données [43], les équipements de laboratoire [21], les postes informatiques [45], une tablette électronique [20] et un livre électronique [28]. La catégorie de gestion des risques couvre des domaines de travail qui portent sur la gestion des risques ferroviaires [11] et un système de gestion de crise [11].…”

“…Le domaine de travail de la catégorie d'automatisation est un appareil photo [25], le domaine de travail de la catégorie des désastres naturels est une ville en cas d'inondation [2], le domaine de travail de la catégorie du jeu est le football européen [18], le domaine de travail de la catégorie du militaire est un navire de guerre [3] et le domaine de travail de la catégorie des ressources humaines est la supervision d'équipes [29]. Functional purpose [1, 2, 4, 6, 7, 10, 12, 15, 16, 18-20, 22, 23, 25, 29, 31, 36, 37, 43-45] Functional goals [17] General purposes [28] Highest level goals [3] Overall purpose [21] Purposes [14] Abstract function [4, 6, 7, 10, 12, 15-17, 22, 25, 28, 29, 43-45] Abstract function and priority measures [1] Abstract purpose [19] Balances [14] Generic control functions [21] Priorities and constraints [3] Values & priority measures; Priorities/values [2,18,20,23,36,37] Priority measures [31] Generalized functions [3,4,6,7,10,12,15,16,22,25,29,[43][44][45] General functions [17,31] General function and work activities [1] Generalised purpose…”