Model-based security and dependability patterns in RCES

Hamid, Brahim; Desnos, Nicolas; Grepet, Cyril; Jouvray, Christophe

doi:10.1145/1868433.1868444

Cited by 11 publications

(11 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This enhancement will provide required assurance already at the design phase as opposed to postponing all checks until the first prototype of a system is available when testing can be performed [223]. Hamid et al [224] attempt to model trust properties as reusable patterns for specific domains. While that work shares our aspirations for reusability, we consider security concerns rather than trust relations.…”

Section: Methods To Deal With Security For Embedded Systemsmentioning

confidence: 99%

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

Vasilevskaya¹

2015

View full text Add to dashboard Cite

Section: Methods To Deal With Security For Embedded Systemsmentioning

confidence: 99%

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

Vasilevskaya¹

2015

View full text Add to dashboard Cite

“…Hamid et al [125] attempt to model trust properties as reusable patterns for specific domains. While that work shares our aspirations for reusability, we consider security concerns rather than trust relations.…”

Section: Methods For Embedded Systemsmentioning

confidence: 99%

Designing Security-enhanced Embedded Systems: Bridging Two Islands of Expertise

Vasilevskaya¹

2013

View full text Add to dashboard Cite

The increasing prevalence of embedded devices and a boost in sophisticated attacks against them make embedded system security an intricate and pressing issue. New approaches to support the development of security-enhanced systems need to be explored. We realise that efficient transfer of knowledge from security experts to embedded system engineers is vitally important, but hardly achievable in current practice. This thesis proposes a Security-Enhanced Embedded system Design (SEED) approach, which is a set of concepts, methods, and tools that together aim at addressing this challenge of bridging the gap between the two areas of expertise.First, we introduce the concept of a Domain-Specific Security Model (DSSM) as a suitable abstraction to capture the knowledge of security experts in a way that this knowledge can be later reused by embedded system engineers. Each DSSM characterises common security issues of a specific application domain in a form of security properties, which are further linked to a range of solutions.As a next step, we complement a DSSM with the concept of a Performance Evaluation Record (PER) to account for the resource-constrained nature of embedded systems. Each PER characterises the resource overhead created by a security solution, a provided level of security, and the evaluation technique applied.Finally, we define a process that assists an embedded system engineer in selecting a relevant set of security solutions. The process couples together (i) the use of the security knowledge accumulated in DSSMs and PERs, (ii) the identification of security issues in a system design, and (iii) the analysis of resource constraints of a system and available security solutions. The approach is supported by a set of tools that automate its certain steps.We use a case study from a smart metering domain to demonstrate how the SEED approach can be applied. We show that our approach adequately supports security experts in description of knowledge about security solutions in the form of formalised ontologies and embedded system engineers in integration of an appropriate set of security solutions based on that knowledge.

show abstract

“…• Validation: applied in practice to a resource-constrained embedded system (RCES) with strong S&D requirements in the context of the TERESA project [4,13]: Railway Systems.…”

Section: Intended Contributionmentioning

confidence: 99%

A model-driven approach for developing a model repository: Methodology and tool support

Hamid

2017

Future Generation Computer Systems

Self Cite

View full text Add to dashboard Cite

h i g h l i g h t s• Repository design: we describe a design framework and infrastructure to support the model-based repository lifecycle.• Modeling: we propose a modeling language to specify a model-based repository independent from end-development applications and execution platforms.• Tooling: we describe an operational architecture for development tools to support the proposed approach.• Validation: we apply the approach to a resource-constrained embedded system (RCES) in the context of the TERESA project : Railway Systems. Keywords:Modeling artifact Repository Meta-model Model-driven engineering Security & dependability patterns a b s t r a c t Several development approaches have been proposed to cope with the increasing complexity of embedded system design. The most widely used approaches are those using models as the main artifacts to be constructed and maintained. The desired role of models is to ease, systematize and standardize the approach to the construction of software-based systems. To enforce reuse and interconnect the process of model specification and system development with models, we promote a model-based approach coupled with a model repository. In this paper, we propose a model-driven engineering methodological approach for the development of a model repository and an operational architecture for development tools. In addition, we provide evidence of the benefits and feasibility of our approach by reporting on a preliminary prototype that provides a model-based repository of security and dependability (S&D) pattern models. Finally, we apply the proposed approach in practice to a use case from the railway domain with strong S&D requirements. * Fax: +33 (0)5 6150 4173. E-mail address:Hamid@irit.fr. the industrial efficiency, fostering technology reuse across domains (reuse of models at different levels), and thus reducing the amount of effort and time needed to design a complex system.Repositories of modeling artifacts have gained increasingly attention recently to enforce reuse in software engineering. In fact, repository-centric development processes are often adopted in software/system development, such as architecture-or patterncentric development processes.According to Bernstein and Dayal [2], a repository is a shared database of information on engineered artifacts. These researchers state that a repository has (1) a Manager for modeling, retrieving, and managing the objects in a repository, (2) a Database to store the data and (3) Functionalities to interact with the repository. In our work, we go one step further by proposing a model-based repository to support the specifications, definitions and packaging of a set of modeling artifacts to assist the developers of trusted applications for embedded systems. Closely related to our vision is the approach for specifying, designing and implementing a reuse repository presented in [3].

show abstract

Model-based security and dependability patterns in RCES

Cited by 11 publications

References 8 publications

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

Designing Security-enhanced Embedded Systems: Bridging Two Islands of Expertise

A model-driven approach for developing a model repository: Methodology and tool support

Contact Info

Product

Resources

About