Safety-Security Co-Engineering Framework

Aslansefat, Koorosh; Gerasimou, Simos; Hamibi, Hamed; Matragkas, Nicholas; Michalodimitrakis, Emmanouil; Papadopoulos, Yiannis; Papoutsakis, Manos; Walker, Martin

Abstract

Executive Summary:
The advantages of a model-based approach for safety have been clear for many years now. However, security analysis is typically less formal and more ad-hoc; it may involve systematic processes but these are not generally tied into a formal model-based development and analysis process in the same way that safety can be.
Task 4.3 of the SESAME project, Safety/Security Co-Engineering, sets out to remedy this by investigating a holistic co-engineering approach that integrates both of these different concerns.
In this report we therefore present a combined safety/security co-engineering framework based on the ODE, the metamodel that serves as a basis for the EDDI dependability management concept. The ODE acts as a common ontology for both safety and security, establishing equivalencies between key concepts and allowing joint analyses to take place in which failures can be incorporated into security analysis and attacks into safety analysis. The combined results indicate the causes and consequences of hazardous events regardless of whether they originate from safety or security issues, and the same risk estimation applies to them all.
While developed for design-time usage, this framework paves the way for the generation of combined safety/security artefacts at runtime as well. The common approach means that specification of requirements, event monitors, diagnostic engines, and responses/actions can take advantage of both safety and security information stored in the design-time models.
To demonstrate the approach, we apply it to a drone-based case study derived from two of the SESAME use cases.

Citation

Aslansefat, K., Gerasimou, S., Hamibi, H., Matragkas, N., Michalodimitrakis, E., Papadopoulos, Y., Papoutsakis, M., & Walker, M. (2023). Safety-Security Co-Engineering Framework. European Commission

• Report Type: Research Report
• Online Publication Date: Dec 1, 2023
• Publication Date: Dec 1, 2023
• Deposit Date: Jul 13, 2024
• Publicly Available Date: Jul 16, 2024
• Pages: 43
• DOI: https://doi.org/10.3030/101017258
• Public URL: https://hull-repository.worktribe.com/output/4736531
• Publisher URL: https://cordis.europa.eu/project/id/101017258/results