MAPE-K/MAPE-SAC: An interaction framework for adaptive systems with security assurance cases

Jahan, Sharmin; Riley, I. T.; Walter, Charles; Gamble, Rose F.; Pasco, Matt; McKinley, Philip K.; Cheng, Betty H. C.

doi:10.1016/j.future.2020.03.031

Cited by 40 publications

(15 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The general procedure can be described by a MAPE loop [74,140]: Constant (M)onitoring of the environment and reflecting changes in a model, (A)nalyzing the model for requirement violations, (P)lanning appropriate countermeasures, and finally (E)xecuting those and updating the model. A MAPE-K loop enhances MAPE with a knowledge base [9,117], while MAPE-SAC introduces security aspects in the control loop [67]. Auto-scaling approaches are usually realized via a MAPE(-K) loop.…”

Section: Combined Mechanismsmentioning

confidence: 99%

A Survey on Resilience in the IoT

et al. 2021

View full text Add to dashboard Cite

Internet-of-Things (IoT) ecosystems tend to grow both in scale and complexity, as they consist of a variety of heterogeneous devices that span over multiple architectural IoT layers (e.g., cloud, edge, sensors). Further, IoT systems increasingly demand the resilient operability of services, as they become part of critical infrastructures. This leads to a broad variety of research works that aim to increase the resilience of these systems. In this article, we create a systematization of knowledge about existing scientific efforts of making IoT systems resilient. In particular, we first discuss the taxonomy and classification of resilience and resilience mechanisms and subsequently survey state-of-the-art resilience mechanisms that have been proposed by research work and are applicable to IoT. As part of the survey, we also discuss questions that focus on the practical aspects of resilience, e.g., which constraints resilience mechanisms impose on developers when designing resilient systems by incorporating a specific mechanism into IoT systems.

show abstract

Section: Combined Mechanismsmentioning

confidence: 99%

A Survey on Resilience in the IoT

et al. 2021

View full text Add to dashboard Cite

show abstract

“…Even though some recent works have proposed reliable mechanisms for the integrating multiple CLs [29,24] and the coordination of CLs has been addressed in other fields, e.g., supply chain [22,14], the coordination of multiple CLs is still an open question for research in telecommunications. Telecommunications systems are highly stochastic and not well-bounded systems, which makes it harder to create models required for the application of control theory or learning techniques, for instance from the field of game theory.…”

Section: Related Workmentioning

confidence: 99%

Intent-driven Closed Loops for Autonomous Networks

Gomes¹,

Buhrgard²,

Harmatos³

et al. 2021

JICTS

View full text Add to dashboard Cite

Closed loops are key enablers for automation that have been successfully used in many industries for long, and more recently for computing and networking applications. The Zero-touch network and service management (ZSM) framework introduced standardized components that allow the creation, execution, and governance of multiple closed loops, enabling zero-touch management of end-to-end services across different management domains. However, the coordinated and optimal instantiation and operation of multiple closed loops is an open question that is left for implementation by the ZSM specifications. In this paper, we propose a methodology that uses intents as a way of communicating requirements to be considered by autonomous management domains to coordinate hierarchies of closed loops. The intent-driven methodology facilitates hierarchical and peer interactions for delegation and escalation of intents. Furthermore, it extends the existing management capabilities of the ZSM framework and facilitates conflict-free integration of closed loops by setting optimal (and non-conflicting) goals that each closed loop in the hierarchy needs to account for. We show an example of the application of the proposed methodology in a network slicing assurance use case. The new capabilities introduced in this paper can be considered as an extension of the ZSM framework to be used in scenarios where multiple intent-driven closed loops exist.

show abstract

“…To manage the security concern, the self-adaptive system should consider MAPE (Monitor, Analyse, Plan, and Execute) control loop [63]. In this regard, Jahan et al [42] developed a security-focused feedback control loop, MAPE-SAC, and its interaction with a MAPE-K, function, and performance-focused control loop to dynamically manage runtime adaptations in response to changes in functional and security conditions.…”

Section: Security Assurance Of the Self Adaptive Systemmentioning

confidence: 99%

System Security Assurance: A Systematic Literature Review

Shukla¹,

Katt²,

Nweke³

et al. 2021

Preprint

View full text Add to dashboard Cite

Security assurance provides the confidence that security features, practices, procedures, and architecture of software systems mediate and enforce the security policy and are resilient against security failure and attacks. Alongside the significant benefits of security assurance, the evolution of new information and communication technology (ICT) introduces new challenges regarding information protection. Security assurance methods based on the traditional tools, techniques, and procedures may fail to account new challenges due to poor requirement specifications, static nature, and poor development processes. The common criteria (CC) commonly used for security evaluation and certification process also comes with many limitations and challenges. In this paper, extensive efforts have been made to study the state-of-the-art, limitations and future research directions for security assurance of the ICT and cyber-physical systems (CPS) in a wide range of domains. We systematically review the requirements, processes, and activities involved in system security assurance including security requirements, security metrics, system and environments and assurance methods. We shed light on the challenges and gaps that have been identified by the existing literature related to system security assurance and corresponding solutions. Finally, we discussed the limitations of the present methods and future research directions.CCS Concepts: • General and reference → Surveys and overviews; • Security and privacy → Systems security.

show abstract

MAPE-K/MAPE-SAC: An interaction framework for adaptive systems with security assurance cases

Cited by 40 publications

References 16 publications

A Survey on Resilience in the IoT

A Survey on Resilience in the IoT

Intent-driven Closed Loops for Autonomous Networks

System Security Assurance: A Systematic Literature Review

Contact Info

Product

Resources

About