Alignment of safety and security risk assessments for modular production systems

Abstract

In order to ensure the safety and security of industrial systems with regard to all life cycle phases from development through operation to disposal, specific regulatory and normative requirements are imposed. Due to the digitalization, interconnection, and constantly increasing complexity of manufacturing systems in the context of Industrie 4.0, the manual effort necessary to achieve the required safety and security is becoming ever greater and almost impossible to manage, especially for small and medium-sized enterprises. Therefore, this paper examines the existing challenges in this area in more detail and gives an outlook on the possible solutions to ensure safety and security much quicker and with less manual effort. The overall vision is a (partially) automated risk assessment of modular systems with respect to safety and security, including the alignment of the corresponding processes from both domains and the formalization of the information models needed.

Manufacturing Systems for Unexpected Events: An Exploratory Review for Operational and Disruption Risks

“…Therefore, Korfmacher [53] emphasized that standards are an appropriate resource for considering functional safety and cybersecurity. This view is supported by Ehrlich, et al [54]. They examined the alignment of safety and security risk assessment processes and the possibility of automation for MSs in the I4 context.…”

Systematic Mapping Study of Systems Security Engineering for Modular Open Systems

“…Springer Link [38] Alignment of safety and security risk assessments for modular production systems Springer Link [39] Enabling a Zero Trust Architecture in Smart Grids Through a Digital Twin Springer Link [40] Integrated Modular Avionics -Past, present, and future Snowballed [41] Towards an Architecture-Centric Approach to Security Analysis Snowballed [42] * Table I Acronyms…”

Towards Trustworthy Safety Assessment by Providing Expert and Tool-Based XMECA Techniques

“…• effects eij of failure mode mij of element fi, which are to be considered, i.e., eij ϵ ΔEi, ΔEi ϲ MEi (8) where ΔEi is a set of failure effects defined by an expert for a particular failure mode mij of an element fii; MEi is a set of all possible effects for a particular failure mode of this element;…”

“…MEi, ∆Ei(q) is a set of failure effects of element f i considered by a q-th expert definition of different probabilities of failure modes m ij of element f i set M∆Pij of sets ∆Pij(q), for all q, ∆Pij(q) 7 of 25 k = k1 + k2 + … + kF (6) e interrelation between previously mentioned fi, mi, and ei, and the nd ci is shown in Figure 3. aracterized by number of rows F* = F, if k1 = k2 = … = kF = 1; in a MECA execution, the following items are sequentially defined by tool support: stance, module components, program operators, process operaof which are to be considered, that is fi ϵ ΔF, ΔF ϲ MF, where ΔF is ents investigated; MF is a set of components; f element fi, which are to be considered, i.e., mij ϵ ΔMi, ΔMi ϲ MMi (7) ments fi failures investigated; MMi is a set of all element fi failures; mode mij of element fi, which are to be considered, i.e., eij ϵ ΔEi, ΔEi ϲ MEi (8) ilure effects defined by an expert for a particular failure mode mij s a set of all possible effects for a particular failure mode of this severity sij of failure mode mij of element fi; probability pij and seadopted according to defined scale on the sets of values MP = {p'h} rdingly; criticality сij of failure mode mij of element fi, which could evaluated by an expert using given function φ or assigned by an n the set of values MС = {с'g}.…”

“…There are many assessment techniques (FMECAfailure modes, effects, and criticality analysis, FTA-fault tree analysis, HAZOP-hazard and operability study, HAZID-hazard identification study [5][6][7]) that can be applied separately and jointly to guarantee the trustworthiness of results. Besides, there is a problem of incompatibility and inconsistency of their outputs in the general case [8], etc.…”