Combined safety and security development lifecylce

Schmittner, Christoph; Ma, Zhenliang; Schoitsch, Erwin

doi:10.1109/indin.2015.7281940

Cited by 19 publications

(14 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Sabaliauskaite et al [55] consider domain lifecycle alignment on an example of ISA84 (IEC 61511) and ISA99 (IEC 62443) standards. An overview of lifecycles provided by standards from both domains is presented by Schmittner et al [56], where authors have identified the main phases of safety and security processes and proposed a combined version. However, in this work we focus only on analyses related to early system development stages.…”

Section: Related Workmentioning

confidence: 99%

Safety and Security Co-Analyses: A Systematic Literature Review

Lisova

Šljivo

Čaušević

2019

IEEE Systems Journal

View full text Add to dashboard Cite

Latest technological trends lead towards systems connected to public networks even in critical domains. Bringing together safety and security work is becoming imperative, as a connected safety-critical system is not safe if it is not secure. The main objective of this study is to investigate the current status of safety and security co-analysis in system engineering by conducting a Systematic Literature Review. The steps of the review are the following: the research questions identification; agreement upon a search string; applying the search string to chosen databases; a selection criterion formulation for the relevant publications filtering; selected papers categorization and analysis. We focused on the early system development stages and identified 33 relevant publications categorized as: combined safety and security approaches that consider the mutual influence of safety and security; safety informed security approaches that consider influence of safety on security; security informed safety approaches that consider influence of security on safety. The results showed that a number of identified approaches are driven by needs in fast developing application areas, e.g., automotive, while works focusing on combined analysis are mostly application area independent. Overall, the study shows that safety and security co-analysis is still a developing domain.

show abstract

Section: Related Workmentioning

confidence: 99%

Safety and Security Co-Analyses: A Systematic Literature Review

Lisova

Šljivo

Čaušević

2019

IEEE Systems Journal

View full text Add to dashboard Cite

show abstract

“…The importance of also consider security when developing safety critical system is already well-know. Merged security and safety lifecycles are proposed in, for example, [15] [16][17] [18]. An overview over approaches that combine safety and security in the system lifecycle process is provided by Kriaa et al [9].…”

Section: Related Workmentioning

confidence: 99%

Safety Critical Software and Security - How Low Can You Go?

Bernsmed

Jaatun²,

Meland

2018

2018 IEEE/AIAA 37th Digital Avionics Systems Conference (DASC)

View full text Add to dashboard Cite

The safety of aviation software is ensured by performing development according to the DO-178C standard. However, this standard has a blind spot in that it fails to consider software security aspects in development. The Building Security In Maturity Model (BSIMM) comprises a software security framework with 113 software security activities. This model is often used for measuring the maturity of an organization's software security lifecycle. In this paper we evaluate the ability of DO-178C to ensure also software security, by demonstrating how few BSIMM activities you can get away with performing, while remaining compliant with the different DO-178C assurance levels. The results indicate that organizations with very low software security maturity can still be able to perform well in accordance to DO-178C. Based on the results, we propose concrete activities that could be integrated into the DO-178C development process, to strengthen the security of the developed software.

show abstract

“…Furthermore, specific challenges for the safety engineering in the automotive domain have been identified in [5]. A domain independent approach towards a combined safety and security lifecycle is proposed in [4].…”

Section: Related Workmentioning

confidence: 99%

Towards a Framework for Alignment Between Automotive Safety and Security Standards

Schmittner

2015

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Modern automotive systems increasingly rely on software and network connectivity for new functions and features. Security of the software and communications of the on-board system of systems becomes a critical concern for the safety of new generation vehicles. Besides methods and tools, safety and security of automotive systems requires frameworks of standards for holistic process and assurance. As a part of our ongoing work, this paper investigates the possibility of a combined safety and security approach to standards in the automotive domain. We examine existing approaches in the railway and avionics domain with similar challenges and identify specific requirements for the automotive domain. We evaluate ISO 15408 as a potential candidate for a combined safety and security approach for complementing automotive safety standard ISO 26262, and discuss their points of alignment.

show abstract

Combined safety and security development lifecylce

Cited by 19 publications

References 6 publications

Safety and Security Co-Analyses: A Systematic Literature Review

Safety and Security Co-Analyses: A Systematic Literature Review

Safety Critical Software and Security - How Low Can You Go?

Towards a Framework for Alignment Between Automotive Safety and Security Standards

Contact Info

Product

Resources

About