Optimising Runtime Safety Analysis Efficiency for Self-Organising Systems

Klumpp, Dominik; Habermaier, Axel; Eberhardinger, Benedikt; Seebach, Hella

doi:10.1109/fas-w.2016.37

Cited by 1 publication

(1 citation statement)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…According to their taxonomy our work covers all of the four layers presented in the context of the "Defense in depth" principle: application, middleware, platform, and close-to-metal. While the mentioned research focus on security, there exist also some work regarding safety of SASs (e. g. [5,8]). Only some researchers consider safety and security aspects together as shown in the following.…”

Section: Related Workmentioning

confidence: 99%

Towards model co-evolution across self-adaptation steps for combined safety and security analysis

Witte¹,

Groner²,

Raschke³

et al. 2022

Proceedings of the 17th Symposium on Software Engineering for Adaptive and Self-Managing Systems

View full text Add to dashboard Cite

Self-adaptive systems offer several attack surfaces due to the communication via different channels and the different sensors required to observe the environment. Often, attacks cause safety to be compromised as well, making it necessary to consider these two aspects together. Furthermore, the approaches currently used for safety and security analysis do not sufficient take into account the intermediate steps of an adaptation. Current work in this area ignores the fact that a self-adaptive system also reveals possible vulnerabilities (even if only temporarily) during the adaptation. To address this issue, we propose a modeling approach that takes into account the different relevant aspects of a system, its adaptation process, as well as safety hazards and security attacks. We present several models that describe different aspects of a self-adaptive system and we outline our idea of how these models can then be combined into an Attack-Fault Tree. This allows modeling aspects of the system on different levels of abstraction and co-evolve the models using transformations according to the adaptation of the system. Finally, analyses can then be performed as usual on the resulting Attack-Fault Tree. CCS CONCEPTS• Software and its engineering → System description languages; Fault tree analysis; • Computer systems organization → Embedded and cyber-physical systems; Dependable and faulttolerant systems and networks.

show abstract

Section: Related Workmentioning

confidence: 99%