• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Polish Control Conference >Security-Oriented Fault-Tolerance in Systems Engineering: A Conceptual Threat Modelling Approach for Cyber-Physical Production Systems
【24h】

Security-Oriented Fault-Tolerance in Systems Engineering: A Conceptual Threat Modelling Approach for Cyber-Physical Production Systems

机译：系统工程中的安全导向容错：网络物理生产系统的概念威胁建模方法

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Faults in the realization and usage of cyber-physical systems can cause significant security issues. Attackers might exploit vulnerabilities in the physical configurations, control systems, or accessibility through internet connections. For CPS, two challenges are combined: Firstly, discipline-specific security measures should be applied. Secondly, new measures have to be created to cover interdisciplinary impacts. For instance, faulty software configurations in cyber-physical production systems (CPPS) might allow attackers to manipulate the correct control of production processes impacting the quality of end products. From liability and publicity perspective, a worst-case scenario is that such a corrupted product is delivered to a customer. In this context, security-oriented fault-tolerance in Systems Engineering (SE) requires measures to evaluate interdisciplinary system designs with regard to potential scenarios of attacks. The paper at hand contributes a conceptual threat modelling approach to cover potential attack scenarios. The approach can be used to derive both system-level and discipline-specific security solutions. As an application case, issues are focused on which attackers intend to exploit vulnerabilities in a CPPS. The goal is to support systems engineers in verification and validation tasks regarding security-oriented fault-tolerance.
机译：网络物理系统的实现和使用情况可能会导致显着的安全问题。攻击者可能会通过Internet连接利用物理配置，控制系统或可访问性的漏洞。对于CPS，合并两个挑战：首先，应采用纪律特定的安全措施。其次，必须创建新措施以弥补跨学科影响。例如，网络物理生产系统（CPP）中有故障的软件配置可能允许攻击者操纵对影响最终产品质量的生产过程的正确控制。从责任和宣传角度来看，一个最坏的情况是，这种腐败的产品被交付给客户。在这种情况下，系统工程中的安全导向容错（SE）需要措施来评估关于潜在攻击场景的跨学科系统设计。手中的纸张有助于涵盖潜在攻击情景的概念威胁建模方法。该方法可用于导出系统级和学科特定的安全解决方案。作为申请案例，问题的重点是攻击者打算在CPPS中利用漏洞。目标是支持有关安全导向的容错的验证和验证任务的系统工程师。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号