Security and Privacy in Cyber-Physical Systems: A Survey of Surveys

Giraldo, Jairo; Sarkar, Esha; Cárdenas, Álvaro A.; Maniatakos, Michail; Kantarcıoğlu, Murat

doi:10.1109/mdat.2017.2709310

Cited by 262 publications

(121 citation statements)

References 30 publications

Supporting

Mentioning

121

Contrasting

Order By: Relevance

“…These types of cyber‐attacks disrupting physical systems require broadening the scope from security and privacy in CPSs to consider the potential for physical harm and the implications for safety . This broader view stresses the need for a combined safety and security risk analysis in CPS, where security and safety goals coexist and require an integration process …”

Section: The Emergence Of Cps: Two Perspectives For Derivation Of Keymentioning

confidence: 99%

Conceptualizing the key features of cyber‐physical systems in a multi‐layered representation for safety and security analysis

Guzman

Wied

Kozine

et al. 2019

Systems Engineering

View full text Add to dashboard Cite

Many safety‐related systems are evolving into cyber‐physical systems (CPSs), integrating information technologies in their control architectures and modifying the interactions among automation and human operators. Particularly, a promising potential exists for enhanced efficiency and safety in applications such as autonomous transportation systems, control systems in critical infrastructures, smart manufacturing and process plants, robotics, and smart medical devices, among others. However, the modern features of CPSs are ambiguous for system designers and risk analysts, especially considering the role of humans and the interactions between safety and security. The sources of safety risks are not restricted to accidental failures and errors anymore. Indeed, cybersecurity attacks can now cascade into safety risks leading to physical harm to the system and its environment. These new challenges demand system engineers and risk analysts to understand the security vulnerabilities existing in CPS features and their dependencies with physical processes. Therefore, this paper (a) examines the key features of CPSs and their relation with other system types; (b) defines the dependencies between levels of automation and human roles in CPSs from a systems engineering perspective; and (c) applies systems thinking to describe a multi‐layered diagrammatic representation of CPSs for combined safety and security risk analysis, demonstrating an application in the maritime sector to analyze an autonomous surface vehicle.

show abstract

Section: The Emergence Of Cps: Two Perspectives For Derivation Of Keymentioning

confidence: 99%

Conceptualizing the key features of cyber‐physical systems in a multi‐layered representation for safety and security analysis

Guzman

Wied

Kozine

et al. 2019

Systems Engineering

View full text Add to dashboard Cite

show abstract

“…Incident analysis security ontology research is presented in [15] and provides a taxonomy which has some similarities to the framework presented in [14], but some aspects have been added in their classification such as action and unauthorized results. In their taxonomy Giraldo et al [16] categorized cyberphysical systems by focusing on some of the CPS characteristics such as its domains, defenses, attacks, network security, research trends, security-level implementation, and computational strategies.…”

Section: Related Workmentioning

confidence: 99%

“…Government: is denoting local or national governments including buildings/housing, emergency services, public benefits, and social services, federal and state governments, tribal governments, military, protection of workers, and environment [16].…”

Section: B Target Sectormentioning

confidence: 99%

See 1 more Smart Citation

Cyber-Security Incidents: A Review Cases in Cyber-Physical Systems

Al-Mhiqani¹,

Ahmad²,

Yassin³

et al. 2018

ijacsa

View full text Add to dashboard Cite

Abstract-Cyber-Physical Systems refer to systems that have an interaction between computers, communication channels and physical devices to solve a real-world problem. Towards industry 4.0 revolution, Cyber-Physical Systems currently become one of the main targets of hackers and any damage to them lead to high losses to a nation. According to valid resources, several cases reported involved security breaches on Cyber-Physical Systems. Understanding fundamental and theoretical concept of security in the digital world was discussed worldwide. Yet, security cases in regard to the cyber-physical system are still remaining less explored. In addition, limited tools were introduced to overcome security problems in Cyber-Physical System. To improve understanding and introduce a lot more security solutions for the cyber-physical system, the study on this matter is highly on demand. In this paper, we investigate the current threats on Cyber-Physical Systems and propose a classification and matrix for these threats, and conduct a simple statistical analysis of the collected data using a quantitative approach. We confirmed four components i.e., (the type of attack, impact, intention and incident categories) main contributor to threat taxonomy of Cyber-Physical Systems.

show abstract

“…Although it is a widely discussed and studied topic, authentication remains a crucial security issue [1][2][3][4]. Nowadays, technologies such as sensor networks, smart systems, cyberphysical systems (CPS), and Internet of Things (IoT) depend on small building blocks like sensors, actuators, measuring instruments, and smart devices.…”

Section: Introductionmentioning

confidence: 99%

Using Physical Context-Based Authentication against External Attacks: Models and Protocols

Melo

Machado

Carmo

2018

Security and Communication Networks

View full text Add to dashboard Cite

Modern systems are increasingly dependent on the integration of physical processes and information technologies. This trend is remarkable in applications involving sensor networks, cyberphysical systems, and Internet of Things. Despite its complexity, such integration results in physical context information that can be used to improve security, especially authentication. In this paper, we show that entities sharing the same physical context can use it for establishing a secure communication channel and protecting each other against external attacks. We present such approach proposing a theoretical model for generating unique bitstreams. Two different protocols are suggested. Each one is evaluated using probabilistic analysis and simulation. In the end, we implement the authentication mechanism in a case study using networks radio signal as physical event generator. The results demonstrate the performance of each of the protocols and their suitability for applications in real world.

show abstract

Security and Privacy in Cyber-Physical Systems: A Survey of Surveys

Cited by 262 publications

References 30 publications

Conceptualizing the key features of cyber‐physical systems in a multi‐layered representation for safety and security analysis

Conceptualizing the key features of cyber‐physical systems in a multi‐layered representation for safety and security analysis

Cyber-Security Incidents: A Review Cases in Cyber-Physical Systems

Using Physical Context-Based Authentication against External Attacks: Models and Protocols

Contact Info

Product

Resources

About