Misbehaviour monitoring on system-of-systems components

Shone, Nathan; Shi, Qi; Merabti, Madjid; Kifayat, Kashif

doi:10.1109/crisis.2013.6766347

Cited by 6 publications

(9 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As remarked in [28], several definitions of SoS have been proposed in the literature according to real-world applications in different areas, including dependability [6] and security [10]. According to [31], we consider that "an SoS is an integration of a finite number of Constituent Systems which are independent and operable, and which are networked together for a period of time to achieve a certain higher goal."…”

Section: Basics On Systems-of-systems 21 Definition and Classificationmentioning

confidence: 99%

“…Some of them deal with dynamicity and evolution properties of complex systems [4], [6], [7], while others tackle systems composed of OTS components [2], [3]. Moreover, a subset of them [5], [10] is addressing emergent behaviors as side topic. All the listed frameworks are realized either for dependability [2], [3], [4], [5], [6], [7], [8] or security [9], [10] purposes.…”

Section: Anomaly Detectionmentioning

confidence: 99%

“…Moreover, a subset of them [5], [10] is addressing emergent behaviors as side topic. All the listed frameworks are realized either for dependability [2], [3], [4], [5], [6], [7], [8] or security [9], [10] purposes.…”

Section: Anomaly Detectionmentioning

confidence: 99%

“…Failure predictors [2], [3], [6] assume that errors already manifested in the system, and try to avoid their escalation in failures or the propagation to unsafe states. In the security domain, we can classify i) intrusion detectors [9], [10], which represent a security layer preventing or blocking possible malicious attacks, and ii) malware detectors, which analyse the system to identify anomalous behaviours due to malicious modules that are already infecting the system.…”

Section: Purpose Of the Frameworkmentioning

confidence: 99%

“…Distributing operations [7], [8] reduces the bottleneck around the coordinator, but requires well-developed distribution of loads and tasks among the CSs. Nevertheless, anomaly detection frameworks [9], [10] targeting security do not consider a distributed data analysis approach. Instead, they prefer sending collected data to a central elaboration unit.…”

Section: Distributedmentioning

confidence: 99%

See 4 more Smart Citations

Exploring anomaly detection in systems of systems

Zoppi

Ceccarelli

Bondavalli

2017

Proceedings of the Symposium on Applied Computing

View full text Add to dashboard Cite

The loosely coupled integration of heterogeneous existing systems, together with the ongoing replacement of monolithic systems design with Off-The-Shelf (OTS) approaches, promotes a new architectural paradigm that is called System of Systems (SoS). In SoSs, independent and autonomous constituent systems (CSs) cooperate to achieve higher-level goals. Some inherent challenges are that boundaries of the SoS may be partially unknown and the components may be governed by different authorities, affecting the ability to observe the system as a whole. Further, novel challenges related to dependability and security are introduced, such as the detection of emerging and possibly unexpected behaviors resulting from the interconnection of previous disconnected CSs. In this paper we explore these challenges questioning if a novel mindset to error, malware or intrusion detection is needed when dealing with SoSs. With the support of a state of the art review, we first identify the design principles and the performance targets of a monitoring and anomaly detection framework. Then we discuss these principles at the light of SoS fundamentals. Ultimately, we propose an approach to design a monitoring and anomaly detection framework for SoSs aggregating i) monitoring approaches ii) SoS properties, and iii) anomaly detection techniques. CCS Concepts• Security and privacy ➝ Intrusion/anomaly detection and malware • Security and privacy ➝ Distributed systems security • Computer systems organization ➝ Peer-to-peer architectures • Computer systems organization ➝ Reliability

show abstract

Section: Basics On Systems-of-systems 21 Definition and Classificationmentioning

confidence: 99%

Section: Anomaly Detectionmentioning

confidence: 99%

Section: Anomaly Detectionmentioning

confidence: 99%

Section: Purpose Of the Frameworkmentioning

confidence: 99%

Section: Distributedmentioning

confidence: 99%

See 3 more Smart Citations

Exploring anomaly detection in systems of systems

Zoppi

Ceccarelli

Bondavalli

2017

Proceedings of the Symposium on Applied Computing

View full text Add to dashboard Cite

show abstract

A systematic mapping study on security for systems of systems

Olivero,

Bertolino,

Dominguez-Mayo

et al. 2023

Int. J. Inf. Secur.

View full text Add to dashboard Cite

In the late twentieth century, the term “System of Systems” (SoS) became popular to describe a complex system made up of a combination of independent constituent systems. Since then, several studies have been conducted to support and assess SoS management, functionality, and performance. Due to the evolutionary nature of SoS and the non-composability of the security properties of its constituent systems, it is difficult to assess or evaluate SoS security. This paper provides an up-to-date survey on SoS security, aimed at stimulating and guiding further research efforts. This systematic mapping study (SMS) focuses on SoS security, privacy, and trust. Our SMS identified 1828 studies from 6 digital libraries, 87 of which were selected that presented approaches analyzing, evaluating, or improving security. We classified these studies using nine research questions that focused on the nature of the studies, the studied SoS, or the study validation. After examining the selected studies, we identified six gaps and as many future work directions. More precisely, we observed that few studies examine SoS problems and instead propose specific solutions, making it challenging to develop generalizable approaches. Furthermore, the lack of standardization has hindered the reuse of existing approaches, making it difficult for solutions to be generalized to other SoS. In addition, the lack of descriptions of industrial environments in the literature makes it difficult to design realistic validation environments. As a result, the validation of new SoS research remains a challenge in the field.

show abstract