STPA-SafeSec: Safety and security analysis for cyber-physical systems

STPA-SafeSec: Safety and security analysis for cyber-physical systems

Cyber-physical systems tightly integrate physical processes and information and communication technologies. As today’s critical infrastructures, e.g., the power grid or water distribution networks, are complex cyber-physical systems, ensuring their safety and security becomes of paramount importance.Traditional safety analysis methods, such as HAZOP, are ill-suited to assess these systems. Furt...

Focus: Safety & Security in Cyber-physical Systems

Addressing Safety and Security Contradictions in Cyber-Physical Systems

Modern cyber-physical systems are found in important domains such as automobiles, medical devices, building automation, avionics, etc.. Hence, they are increasingly prone to security violations. Often such vulnerabilities occur as a result of contradictory requirements between the safety/real-time properties and the security needs of the system. In this paper we propose a formal framework that ...

Software Safety and Security Risk Mitigation in Cyber-physical Systems

Aligning Cyber-Physical System Safety and Security

Safety and security are two key properties of Cyber-Physical Systems (CPS). Safety is aimed at protecting the systems from accidental failures in order to avoid hazards, while security is focused on protecting the systems from intentional attacks. They share identical goals – protecting CPS from failing. When aligned within a CPS, safety and security work well together in providing a solid foun...