A STPA-Sec Case Study: Eliciting Early Security Requirements for a Small Unmanned Aerial System

Sayers, Joshua M.; Feighery, Brynn; Span, Martain Trae

doi:10.1109/sss47320.2020.9197728

Cited by 5 publications

(3 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…STPA-Sec has been successively applied in a variety of sectors. In [31] STPA-Sec is used to guide the choice of security requirements for the design of a drone. The analysis is made upon three different levels of detail to provide traceability to the system owner's mission, to make systems security easily understandable.…”

Section: Literature Reviewmentioning

confidence: 99%

Thinking in Systems, Sifting Through Simulations: A Way Ahead for Cyber Resilience Assessment

et al. 2023

View full text Add to dashboard Cite

The interaction between the physical world and information technologies creates advantages and novel emerging threats. Cyber-physical systems (CPSs) result vulnerable to cyber-related disruptive scenarios, and, for some critical systems, cyber failures may have fallouts on society and environment. Traditional risk analysis in no more sufficient to deal with these problems. New techniques are gaining increasing consensus, especially those based on systems theory. In this context, the System-Theoretic Process Analysis for Security (STPA-Sec) extends the Systems-Theoretic Accident Modelling and Processes (STAMP) model considering cyber threats, and identifying unsafe and unsecure controls throughout a cyber socio-technical system. Despite its large usage as a descriptive tool, there is still limited use of STPA-Sec in (semi-)quantitative terms. This article presents System-Theoretic Process Analysis for Security with Simulations (STPA-Sec/S), a methodological interface between STPA-Sec and quantitative resilience assessment based on simulation models. The methodology is instantiated in a demonstrative case study of a water treatment plant, and its critical CPSs which may impact both community health, and environment. The obtained results show how STPA-Sec/S foster systems understanding, allow a systematic identification of its major criticalities, and the respective quantification.INDEX TERMS Cyber security, cyber-socio-technical systems, hazard analysis, industrial systems engineering, resilience management, systems modeling.Open Access funding provided by 'Università degli Studi di Roma ''La Sapienza''' within the CRUI CARE Agreement

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Thinking in Systems, Sifting Through Simulations: A Way Ahead for Cyber Resilience Assessment

et al. 2023

View full text Add to dashboard Cite

show abstract

“…Thus, a platform-centric SA is proposed, instead of relying on human pilots' perceptions as in [10]. The paper also innovates since IFA 2 S design is completely based on Systems-Theoretic Process Analysis (STPA) method [11] [12], aiming to allow the system to act as soon as it identifies a situation that potentially leads to an accident. This paper describes a process similar to that found in articles [13] and [14] to achieve SA in dynamic systems.…”

Section: Related Workmentioning

confidence: 99%

“…Measurements were performed on the variable ξ (either vertical speed, h  , or roll angle, φ ) and verified if 20 consecutive standard deviation measurements, T N , are above a certain level, Lim T N . Number of samples was determined empirically during simulations, taking into account the capability of the system for identifying turbulences efficiently, avoiding both false alarmsand aircraft dangerous attitudes as defined in(11) and(12).…”

mentioning

confidence: 99%

Unmanned Aerial Vehicles Flight Safety Improvement Using In-Flight fd

Mattei¹,

Orbital²,

Toledo³

et al. 2021

IIM

View full text Add to dashboard Cite

This paper presents a novel onboard system called In-Flight Awareness Augmentation System (IFA 2 S) to improve flight safety. IFA 2 S is designed to semi-automatically (with human supervision) avoid hazards and accidents due to either internal or external causal factors. The requirements were defined in an innovative way using Systems-Theoretic Process Analysis (STPA) method and applied next to model the system. IFA 2 S increases aircraft awareness regarding both itself and its environment and, at the same time, recognizes platform and operational constraints to act in accordance to predefined decision algorithms. Results are presented through simulations and flight tests using state machines designed to allow the adoption of appropriate actions for the identified hazards. The different decision algorithms are evaluated over as many as possible hazard situations by simulations conducted with software Labview and XPlane flight simulator. Flight tests are performed in a small fixed wing aircraft and make use of a limited version IFA 2 S, partially attending identified requirements. Results support the conclusion that IFA 2 S is capable of improving flight safety.

show abstract