Security-Informed Safety Analysis of Autonomous Transport Systems Considering AI-Powered Cyberattacks and Protection

Abstract

The entropy-oriented approach called security- or cybersecurity-informed safety (SIS or CSIS, respectively) is discussed and developed in order to analyse and evaluate the safety and dependability of autonomous transport systems (ATSs) such as unmanned aerial vehicles (UAVs), unmanned maritime vehicles (UMVs), and satellites. This approach allows for extending and integrating the known techniques FMECA (Failure Modes, Effects, and Criticality Analysis) and IMECA (Intrusion MECA), as well as developing the new SISMECA (SIS-based Intrusion Modes, Effects, and Criticality Analysis) technique. The ontology model and templates for SISMECA implementation are suggested. The methodology of safety assessment is based on (i) the application and enhancement of SISMECA considering the particularities of various ATSs and roles of actors (regulators, developers, operators, customers); (ii) the development of a set of scenarios describing the operation of ATS in conditions of cyberattacks and physical influences; (iii) AI contribution to system protection for the analysed domains; (iv) scenario-based development and analysis of user stories related to different cyber-attacks, as well as ways to protect ATSs from them via AI means/platforms; (v) profiling of AI platform requirements by use of characteristics based on AI quality model, risk-based assessment of cyberattack criticality, and efficiency of countermeasures which actors can implement. Examples of the application of SISMECA assessment are presented and discussed.

Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0

“…Reflecting a country-specific lens, Putra et al [58] evaluated maritime cyber threats in Indonesia using a 3D risk assessment model, highlighting the pivotal role of company procedures in cybersecurity. Illiashenko et al [59] offered a comprehensive methodology specifically for the safety evaluation of autonomous transport systems, combining FMECA and IMECA, with an emphasis on envisioning cyberattack scenarios. In a strategic approach, Lee et al [60] addressed the potential repercussions of a DDoS attacks on the ISO 19847:2018 [73] shipboard data server, proposing robust risk mitigation strategies.…”

The Markov Concept of the Energy Efficiency Assessment of the Edge Computing Infrastructure Peripheral Server Functioning over Time

“…As peripheral nodes in Edge Computing, the corresponding servers [6][7][8][9] are used, which are placed directly where information is produced. Usually, these are production or technical premises in which it is impossible to mount a server rack and ensure cleanliness.…”

Reviewing and Integrating AEC Practices into Industry 6.0: Strategies for Smart and Sustainable Future-Built Environments

“…This study examines risk reduction, fail-safe measures, and building control systems cyber-security. According to Illiashenko et al, security-informed safety (SIS) or cybersecurity-informed safety (CSIS) is a developing interest in assessing autonomous system safety and reliability using an entropy-oriented technique[117].• Autonomous Systems and Infrastructure Integration: Integrating autonomous systems into existing infrastructures and conceptualizing and developing new infrastructures to support them has become a significant area of research. This includes creating communication protocols, optimizing information transfer, and adapting the architectural design for emerging technology.…”