Safety and Security Interdependencies in Complex Systems and SoS: Challenges and Perspectives

This paper has two objectives: raising awareness about the existence, nature and impacts of safety-security interdependencies in complex systems, and promoting the idea that System Engineering tools and methodologies may help to master them. Firstly, we illustrate and categorize the different types of safety security interdependencies, before identifying their related stakes. Then, we highlight the links between safety and security ontologies, in theory and in practice.We also present some primary elements needed for a concrete application of System Engineering approaches on the safety-security issue. Finally, potential directions and future efforts needed to continue this research are discussed.

[1]  Gary Stoneburner.  Toward a Unified Security-Safety Model , 2006, Computer.

[2]  David Loshin.  Master Data Management , 2008 .

[3]  Ludovic Piètre-Cambacédès,et al.  The SEMA referential framework: Avoiding ambiguities in the terms "security" and "safety" , 2010, Int. J. Crit. Infrastructure Prot..

[4]  Ludovic Piètre-Cambacédès,et al.  Attack and Defense Modeling with BDMP , 2010, MMM-ACNS.

[5]  Carl A. Gunter,et al.  Addressing Safety and Security Contradictions in Cyber-Physical Systems , 2009 .

[6]  Erwin Schoitsch.  Design for Safety and Security of Complex Embedded Systems: A Unified Approach , 2005 .

[7]  Alex Berson,et al.  Master Data Management And Customer Data Integration For A Global Enterprise , 2007 .

[8]  Rune Winther,et al.  Security Assessments of Safety Critical Systems Using HAZOPs , 2001, SAFECOMP.

[9]  Odd Nordland.  Making Safe Software Secure , 2008, SSS.

[10]  Computer Network Security , 2005 .

[11]  Marc Bouissou,et al.  Attack and defense dynamic modeling with BDMP - Extended version Modélisation dynamique d'attaques et de défenses avec les BDMP - Version longue , 2010 .

[12]  William H. Sanders,et al.  Model-based evaluation: from dependability to security , 2004, IEEE Transactions on Dependable and Secure Computing.

[13]  Frédérique Vallee,et al.  Convergence of the Latest Standards Addressing Safety and Security for Information Technology , 2010 .

[14]  Jonathan D. Moffett,et al.  The Integration of Safety and Security Requirements , 1999, SAFECOMP.

[15]  Ludovic Pietre-Cambacedes.  Des relations entre sûreté et sécurité , 2010 .

[16]  David Clark,et al.  Safety and Security Analysis of Object-Oriented Models , 2002, SAFECOMP.