SafSec: Commonalities Between Safety and Security Assurance
نویسندگان
چکیده
Many systems, particularly in the military domain, must be certified or accredited by both safety and security authorities. Current practice argues safety and security accreditations separately. A research project called SafSec has been investigating a combined approach to safety and security argumentation, and has shown that there can be practical benefits in performing a combined analysis and documenting a combined argument for both safety and security.
منابع مشابه
Combining Security and Safety Principles in Practice
In this paper we present an example of applying a combination of security and safety principles. The Ministry of Defence have been developing a common methodology for security accreditation and safety assurance within the SafSec project [5]. The example described in the paper applies this approach at a detailed level, using aspects of security to support the safety argument and safety technique...
متن کاملFrom Safety Cases to Security Cases
Assurance cases are widely used in the safely domain, where they provide a way to justify the safety of a system and render that justification open to review. Assurance cases have not been widely used in security, but there is guidance available and there have been some promising experiments. There are a number of differences between safety and security which have implications for how we create...
متن کاملAssurance Case Driven Design based on the Harmonized Framework of Safety and Security Requirements
Assurance (Security and Safety) Case is an approach to prove critical systems and software compliance with security and safety requirements. We propose an advanced framework named as Assurance Case Driven Design (AC DD) to improve cost-effectiveness of certification and licensing processes. AC DD is based on Claim-Argument-Evidence-Criteria (CAEC) notation and Development-Verification&Validatio...
متن کاملSecurity-Informed Safety Case Approach to Analysing MILS Systems
Safety cases are the development foundation for safety-critical systems and are often quite complex to understand depending on the size of the system and operational conditions. The recent advent of security aspects complicates the issues further. This paper describes an approach to analysing safety and security in a structured way and creating security-informed safety cases that provide justif...
متن کاملSecurity of Safety Important I & C Systems
One of the most challenging modern problems–security assessment and assurance for safety important I&C systems–is discussed. Interrelations and hierarchical structure of I&C systems attributes, including safety and security, are considered. Review of existing regulatory documents that covers various development and operation aspects of safety important I&C systems is presented. Such a review al...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2005