首页> 外文会议>Annual IEEE International Systems Conference >A Top Down Approach for Eliciting Systems Security Requirements for a Notional Autonomous Space System
【24h】

A Top Down Approach for Eliciting Systems Security Requirements for a Notional Autonomous Space System

机译:自上而下的方法来实现名义自治空间系统的系统安全要求

获取原文

摘要

Today's highly interconnected and technology reliant environment places great emphasis on the need for secure cyber-physical systems. This work addresses this need by detailing a top down systems security requirements analysis approach for understanding and eliciting security requirements for a notional space system. More specifically, the System-Theoretic Process Analysis approach for Security (STPA-Sec) is used to understand and elicit systems security requirements during the conceptual stage of development. This work employs STPA-Sec in a notional space system to detail the development of functional-level security requirements, design-level engineering considerations, and architectural-level security specifications early in the system life cycle when the solution trade-space is largest rather than merely examining components and adding protections during system operation, maintenance, or sustainment. Lastly, this approach employs a holistic viewpoint which aligns with the systems and software engineering processes as detailed in ISO/IEC/IEEE 152SS and NIST SP SOO-160 Volume 1. This work seeks to advance the science of systems security by providing insight into a viable systems security requirements analysis approach which results in traceable security, safety, and resiliency requirements that can be designed-for, built-to, and verified with confidence.
机译:当今高度互连且依赖技术的环境非常重视对安全的网络物理系统的需求。这项工作通过详细介绍自上而下的系统安全需求分析方法来满足此需求,以了解和得出概念空间系统的安全需求。更具体地说,安全性的系统理论过程分析方法(STPA-Sec)用于在开发的概念阶段理解和得出系统安全性要求。这项工作在概念空间系统中使用STPA-Sec来详细描述功能级别安全要求,设计级别工程注意事项和体系结构级别安全规范在系统生命周期中解决方案交易空间最大而不是最大的开发过程。仅检查组件并在系统运行,维护或维护期间添加保护。最后,这种方法采用了与ISO / IEC / IEEE 152SS和NIST SP SOO-160第1卷中详细介绍的系统和软件工程过程相一致的整体观点。可行的系统安全性需求分析方法,可产生可追溯的安全性,安全性和弹性需求,这些需求可以针对性地设计,构建和验证。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号