Ecole d'ingénieur et centre de recherche en Sciences du numérique

Designing safe and secure embedded and cyber-physical systems with SysML-sec

Apvrille, Ludovic; Roudier, Yves

MODELSWARD 2015, 3rd International Conference on Model-Driven Engineering and Software Development, 9-11 February 2015, Angers, France / Also published in Communications in Computer and Information Science, Vol. 580

The introduction of security flaws into a system may result from design or implementation mistakes. It entail far-reaching consequences for connected embedded or cyber-physical systems, including physical harm. Security experts focus either on finding out and deriving security mechanisms from more or less explicitly defined security requirements or on the a posteriori assessment of vulnerabilities, namely pentesting. These approaches however often miss the necessary iterations between security countermeasures and system functionalities in terms of design and deployment. Worse, they generally fail to consider the implications of security issues over the system’s safety, like for instance the adverse effect that security countermeasures may produce over expected deadlines due to costly computations and communications latencies. SysML-Sec focuses on these issues throughout design and development thanks to its model-driven approach that promotes exchanges between system architects, safety engineers, and security experts. This paper discusses how SysML-Sec can be used to simultaneously deal with safety and security requirements, and illustrates the methodology with an automotive use case.

Doi Hal Bibtex

Titre:Designing safe and secure embedded and cyber-physical systems with SysML-sec
Type:Conférence
Langue:English
Ville:Angers
Pays:FRANCE
Date:
Département:Sécurité numérique
Eurecom ref:6015
Copyright: © Springer. Personal use of this material is permitted. The definitive version of this paper was published in MODELSWARD 2015, 3rd International Conference on Model-Driven Engineering and Software Development, 9-11 February 2015, Angers, France / Also published in Communications in Computer and Information Science, Vol. 580 and is available at : https://doi.org/10.1007/978-3-319-27869-8_17
Bibtex: @inproceedings{EURECOM+6015, doi = {https://doi.org/10.1007/978-3-319-27869-8_17}, year = {2015}, title = {{D}esigning safe and secure embedded and cyber-physical systems with {S}ys{ML}-sec}, author = {{A}pvrille, {L}udovic and {R}oudier, {Y}ves}, booktitle = {{MODELSWARD} 2015, 3rd {I}nternational {C}onference on {M}odel-{D}riven {E}ngineering and {S}oftware {D}evelopment, 9-11 {F}ebruary 2015, {A}ngers, {F}rance / {A}lso published in {C}ommunications in {C}omputer and {I}nformation {S}cience, {V}ol. 580}, address = {{A}ngers, {FRANCE}}, month = {02}, url = {http://www.eurecom.fr/publication/6015} }
Voir aussi: