Safety risk communications is a discipline which is significantly more mature than information security risk communications. This article reviews relevant topics in safety communications and discusses their potential application to information security. a 2009 Published by Elsevier Ltd.

The fundamental challenge facing security professionals is preventing losses, be they operational, financial or mission losses. As a result, one could argue that security professionals share this challenge with safety professionals. Despite their shared challenge, there is little evidence that recent advances that enable one community to better prevent losses have been shared with the other for...

Safety and security are two reliability properties of a system. A “Safe” system provides protection against errors of trusted users, while a “Secure” system protects against errors introduced by untrusted users. There is considerable overlap between mechanisms to support each property. Requirements for rapid service creation have stimulated the development of programmable network infrastructure...

In order for a network protocol to gain acceptance in the broader Internet community it is necessary for that protocol to be deployed on enough systems and used by enough people to show that it is both beneficial and also not a danger to the rest of the network as a whole. Gaining acceptance for a new protocol is therefore a chicken and egg problem, and solving it requires that protocol designe...

The flow logic approach to static analysis amounts to specifying the admissibility of solutions to analysis problems; when specified using formulae in stratified alternation-free least fixed point logic one may use efficient algorithms for computing the least admissible solutions. We extend this scenario to validate the fulfilment of safety and security constraints on admissible solutions; the ...

The manifold interactions between safety and security aspects in embedded systems makes it plausible to handle safety and security risks in a unified way. The paper develops a corresponding risk measure in the context of discrete event systems (DEVS). The chosen approach is based on a simulation of system dynamics, which allows risk assessments even in cases with stepwise system degradation, ca...

For a long time risks of manipulation protection and data protection of vehicle electronics could be considered relatively uncritical. Due to the wireless technology and internet connectivity of the vehicle electronics new risks arise that may affect the safety of the entire vehicle and passengers. Berner & Mattner provides an overview on the required formalisation of the security process and g...

The terms 'safety' and 'security' are often used to characterise computer systems when used in a context where reliance is placed upon them. These terms are normally regarded as representing distinct properties, yet there is considerable ambiguity in the terms. At a linguistic level, the common phrase 'safe and secure' indicates a limited distinction and, in Germanf, no real distinction can be ...

The railroad industry is being challenged by recent state regulations requiring the disclosure of routing information of trains carrying hazardous materials (hazmat) to the general public. While there is a need to know, the dissemination of such information is contrary to both industry practice and Federal Railroad Administration (FRA) rules. The conundrum is that there needs to be disclosure t...

What is Intelligent Infrastructure? While our nation’s cities and communities face increasingly serious challenges brought on by an aging and inadequate physical infrastructure, rapid advances in computing and communications have radically transformed cyberinfrastructure industries in the US economy. These technologies have the potential to similarly transform our cities and communities; improv...