Back-to-Back Fault Injection Testing in Model-Based Development

Folkesson, Peter; Ayatolahi, Fatemeh; Sangchoolie, Behrooz; Vinter, Jonny; Islam, Mafijul; Karlsson, Johan

doi:10.1007/978-3-319-24255-2_11

Cited by 6 publications

(6 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The effective attacks are however further classified according to how severely they affect the system behaviour. Similar to our previous work [22], the estimated vehicle speed output signal is used for classifying the severity of an attack. An attack is classified as Severe when the estimated speed of the vehicle has a difference of more than ±10 km/h from the attack-free value.…”

Section: Resultsmentioning

confidence: 99%

“…However, our attack injection technique is well-suited for evaluating security in early development phases before a physical system or prototype is available. To this end, similar to past work [22], [23], [24], [25] where faults are injected on behavior models of the system using Matlab/Simulink [10], we use the MODIFI tool [12] to inject attacks into Matlab/Simulink models.…”

Section: B Related Workmentioning

confidence: 99%

“…This is done by adding attack models, simulating the six cybersecurity attacks presented in §III-B, to the fault model library of the tool. MODIFI has previously been used to inject faults for dependability assessment of software developed as Simulink models [22]. It enables both functional and non-functional testing to be performed in early phases of the software development life cycle within the same environment typically used for modelbased development.…”

Section: Attack Injection Framework a Attack Injectionmentioning

confidence: 99%

“…2) Brake-by-wire (BBW) Model: A four-wheel BBW application, used in several previous work [22], [34] and research projects such as TIMMO [35] and VeTeSS [36], is used in this paper as a control application example for our attack injection experiments. An overview of the BBW system developed using five ECUs (Electronic Control Units) connected to a bus is given in Fig.…”

Section: A Target Systemsmentioning

confidence: 99%

See 3 more Smart Citations

A Study of the Interplay Between Safety and Security Using Model-Implemented Fault Injection

Sangchoolie

Folkesson

Vinter

2018

2018 14th European Dependable Computing Conference (EDCC)

Self Cite

View full text Add to dashboard Cite

The combination of high mobility and wireless communication in many safety-critical systems have increased their exposure to malicious security threats. Consequently, many works in the past have proposed solutions to ensure safety and security of these systems. However, not much attention has been given to the interplay between these two groups of nonfunctional requirements. This is a concern as safety solutions may negatively impact system security and vice versa. This paper addresses the interplay between safety and security by proposing an attack injection framework, based on model-implemented fault injection, suitable for model-based design. The framework enables us to study and evaluate the impact of cybersecurity attacks on system safety early in the development process. To this end, we have implemented six attack injection models and conducted experiments on Simulink models of a CAN bus and a brake-by-wire controller. The results show that the security attacks modeled could successfully impact the system safety by violating our defined safety requirements.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: B Related Workmentioning

confidence: 99%

Section: Attack Injection Framework a Attack Injectionmentioning

confidence: 99%

Section: A Target Systemsmentioning

confidence: 99%

See 2 more Smart Citations

A Study of the Interplay Between Safety and Security Using Model-Implemented Fault Injection

Sangchoolie

Folkesson

Vinter

2018

2018 14th European Dependable Computing Conference (EDCC)

Self Cite

View full text Add to dashboard Cite

show abstract

“…Concerning the use of FI across the range of abstraction levels of ISO 26262, most of the work has been done as a way of verifying the implemented safety mechanisms or safety requirements [12]. Only few works have emphasised its usage during early design phases.…”

Section: Related Workmentioning

confidence: 99%

Early Safety Assessment of Automotive Systems Using Sabotage Simulation-Based Fault Injection Framework

Juez¹,

Calonge²,

Lattarulo³

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. As road vehicles increase their autonomy and the driver reduces his role in the control loop, novel challenges on dependability assessment arise. Model-based design combined with a simulation-based fault injection technique and a virtual vehicle poses as a promising solution for an early safety assessment of automotive systems. To start with, the design, where no safety was considered, is stimulated with a set of fault injection simulations (fault forecasting). By doing so, safety strategies can be evaluated during early development phases estimating the relationship of an individual failure to the degree of misbehaviour on vehicle level. After having decided the most suitable safety concept, a second set of fault injection experiments is used to perform an early safety validation of the chosen architecture. This double-step process avoids late redesigns, leading to significant cost and time savings. This paper presents a simulation-based fault injection approach aimed at finding acceptable safety properties for model-based design of automotive systems. We focus on instrumenting the use of this technique to obtain fault effects and the maximum response time of a system before a hazardous event occurs. Through these tangible outcomes, safety concepts and mechanisms can be more accurately dimensioned. In this work, a prototype tool called Sabotage has been developed to set up, configure, execute and analyse the simulation results. The feasibility of this method is demonstrated by applying it to a Lateral Control system.

show abstract