Integrated design for tackling safety and security challenges of smart products and digital manufacturing

Abstract

The Internet of Things (IoT) is the key facilitator for digital manufacturing (Industry 4.0, Cyber-physical Systems), as well as for smart, intelligent products, services and processes. In the IoT, increasingly many product and process functions become safety-critical and exposed to IT security attacks. This adds tremendous complexity to product and process design, which this paper shows by using the automotive sector as a particularly challenging example. The article proposes a new logic and method for tackling the major challenges of design for functional safety and IT security which is essentially based on reducing the design solutions' complexities by integration. This is a very important and emerging area in design under 'design for security'. No changes. Section 3 should also include latest research on cyber-secure industrial control systems. We extended Section 3 by one paragraph elaborating on the CPS and ICS and citing three of the still very few key references on the subject of the integration of cybersecurity and functional safety in the design of ICS (new references [5,6,7]). To make the transition to the automotive sector, we have added a statement explaining the since industry is still the min driving force in the cybersecurity/safety integration, most relevant works can be found in sector-specific research and industry practice publications. You need to discuss role of people, hardware and software in the security of ESCL. We interpret this as a supporting remark, since we indicate in several places that the key idea and objective of our research is to enable an integrated design view on cybersecurity and functional safety aspects. Integrated design is essentially about enabling human experts from several different fields to collaborate efficiently in the design process, which is exactly what we search to facilitate by our method. Furthermore, in table 1 we established a vehicular vocabulary leveraging the communication between cybersecurity and safety experts. Also link between safety and cyber security is well presented. Good work. No changes. The paper introduces a new logic to drive safety and security concerns in cyber-physical systems. The proposed method is applied on an industrial case. No changes. The promised methodology is too shallow by far; New logic engineering methods for CPS. Deliberately and due to the requirements we were having for this research, we have based our method and our related research methodology on two emerging industry standards. Therefore, it is true that what we propose is rather a novel method than a profound methodology. We also agree to the reviewer that this methods represents a now logic of applying existing engineering methods for achieving integration n design. In order to take this explicitly into account, we have replaced the word "methodology" both in the abstract and the body of the text by "method" and/or "new logic of engineering methods".

Socio-Technical Perspectives on Smart Working: Creating Meaningful and Sustainable Systems

“…According to the CIPD (2008, p.20), the top barrier to implementing new practices is the operational pressure that absorbs time necessary to develop and trial different ways of working. Indeed, it is clear that the advent of smart technologies has increased the challenge and range of cyber security issues (Flatt et al 2016;Riel et al 2017). Unlike previous generations of technological development, these challenges go beyond the sphere of control of manufacturers and suppliers.…”

An architectural approach to the integration of safety and security requirements in smart products and systems design

“…In this paper we extend our methodology for the integration of functional safety and cybersecurity aspects in the early phases of industrial embedded systems design [5] by a systematic approach to integrated requirements elicitation based on AD and SFA on system architecture level. Our method leverages the integration of functional safety and cybersecurity design requirements on system architecture level, which is key to detailed component design that is safe and combats cyber threats effectively and efficiently.…”

“…Designing CPS increasingly requires integrated design methods [3] due to the high degree of dependability of these CPS in terms of their functional safety, cybersecurity, reliability, availability, integrity, maintainability and other essential system properties [4]. We have published our results of the application of integrated design methods to the integration of both functional safety and cybersecurity requirements of automotive embedded systems essentially based on the hardware-software-interface (HSI) specification in [5]. In this paper, we build on this work in order to investigate how to use SFA in combination with AD in order to integrate requirements to functional safety and cybersecurity, as well as requirements linked to the cyber-infrastructure in the design of CPS.…”

On the Relationship between Software Complexity and Security

“…Consequently, it is imperative to keep complexity to a certain limit to effectively manage software security, see Figure 1. Hence, complexity can be a major cause of security breaches [32]. Increased complexity makes it easier for an application to completely breakdown.…”