Integration Approach for Communications-Based Train Control Applications in a High Assurance Security Architecture

Abstract

Provide assurance through functional and robustness testing (ISO/IEC 62443) • How to integrate underspecified components with weak confidence? • E.g., external libraries for encryption, general purpose UI Fatal features "To be discovered" Planned features Conformance faults adapted from Takanen, A.: "Fuzzing for Software Security Testing and Quality Assurance" Security for Safety Long lifecycle period of development and certification of critical software vs. sudden security vulnerabilities