Application of Software Safety Analysis Using Event-B

Communications in Computer and Information Science

2022

Critical domains (like Cyber-Physical Systems-CPSs) have witnessed increased demand for considering both safety and security concerns during the early phases of the System Engineering (SE) process. Particularly, in the design phase, safety and security requirements should cascade down across different system views till the architectural design. However, such an enrichment process is often complex and lacks guidance to precisely specify the corresponding properties and consistently break down high-level system specifications into intricate architecture for a rigorous analysis. To this end, we propose a formal approach pursuing joint analysis of safety and security objectives, specialize-able across different system views. In particular, the approach strives for a multi-layered system representation, integrating mission, functional and component views, and libraries of pre-defined safety and security properties, instantiate-able at each layer. We rely upon the meta-modeling and formal techniques for the specification, conceptual modeling, formal interpretation, and verification of the system w.r.t. the allocated properties. The overall approach is validated using Rodin as an instance of a formal-based tool for properties' verification.

Section: Related Work and Positioningmentioning

confidence: 99%

Formal Analysis Approach for Multi-layered System Safety and Security Co-engineering

Communications in Computer and Information Science

2022

“…Several works demonstrate the applicability of the Event-B method for rigorous analysis of safety [29] and security [30] concerns. However, these works are constrained by the granularity level and concepts chosen for modeling, which imposes requirements specification at the same level.…”

Section: Related Work and Positioningmentioning

confidence: 99%

Facilitating Safety and Security Co-design and Formal Analysis in Multi-layered System Modeling

2022 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf

2022

The engineering process of systems deployed in critical domains (e.g., automotive) advocates for early-stage integrated analysis of safety and security concerns, given their mutual influence. Specifically, in the design phase, safety and security requirements undergo a transition to the system architectural design across different granular and conceptual representations. However, such an enrichment process is often complex and lacks preliminary guidance to consistently break down high-level system specifications and requirements into intricate architecture and deployment. In particular, engineers require further support to interpret diverse system, safety, and security expertise and facilitate the consistent passage of knowledge pertaining to these disciplines for automated analysis. To this end, we propose an approach to facilitate the joint design and formal analysis of system safety and security concerns. Notably, the approach aims for a three-layered system modeling, integrating mission, functional and component views, and also, reusable libraries of pre-defined safety and security properties, specialize-able across them. We couple the Model-Driven Engineering (MDE) paradigm and Formal Methods (FM) for the hierarchical-precise modeling, formal interpretation, and verification of model views w.r.t. the desired properties. The accompanying tool-chain support for approach instantiation builds upon Papyrus as a modeling framework and Rodin as a formal-based tool for verification. The proposed approach is illustrated via a Connected-Driving Vehicles (CDVs) use case.

“…A main concern demanding tool support is the passage from semi-formal structured models to their formal specification. Some of the cited works address the use of Event-B as formal method and tool for the analysis of system's safety and security concerns [35] [36]. These works can be constrained by the granularity level and concepts chosen for modeling what imposes requirements to be specified at the same level.…”

Section: Related Work and Positioningmentioning

confidence: 99%

Multi-layered Model-based Design Approach towards System Safety and Security Co-engineering

2021 ACM/IEEE International Conference on Model Driven Engineering Languages and Systems Companion (MODELS-C)

2021

The integration of safety and security concerns in critical domains (e.g., Cyber-Physical Systems (CPSs)) is of utmost importance, and should be conducted in early design phases of system engineering process. Within a Model-Based System Engineering (MBSE) context, safety and security requirements cascade-down across models and views, thus contributing to the detailed missions, functions, and lastly, the architecture. Such enrichment process is often complex and lacks guidance to consistently breakdown high-level mission-centric system specifications into the detailed architecture. In particular, nonsavvy safety and security engineers require support to facilitate integration and verification of stringent safety constraints and security exigencies. In this regard, we propose a multi-layered design approach that leverages existing techniques like Model-Driven Engineering (MDE) and formal methods, to facilitate integrated verification of high-level safety and security objectives that can be further specialized across different representations (i.e. mission, functional, and architectural) of the system. The overall approach is validated based upon a Connected Driving Vehicles (CDVs) case study, and using Eclipse Papyrus and Rodin as experimentation tools.