On the Interplay Between Cyber and Physical Spaces for Adaptive Security

Tsigkanos, Christos; Pasquale, Liliana; Ghezzi, Carlo; Nuseibeh, Bashar

doi:10.1109/tdsc.2016.2599880

Cited by 48 publications

(33 citation statements)

References 48 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This eliminates constraints (e.g., limited connectivity) imposed by other formalisms such as action calculi, which are suitable to represent interactions only between physical or cyber components. Moreover, BRS have been used to reason about CPS for various applications domains such as adaptive security systems [25]. Finally, we plan to develop a technique to analyze incidents that are generated from mapping a pattern to a system.…”

Section: Discussionmentioning

confidence: 99%

I've seen this before

Alrimawi

Pasquale

Mehta

et al. 2018

Proceedings of the 1st International Workshop on Security Awareness From Design to Deployment

Self Cite

View full text Add to dashboard Cite

An increasing number of security incidents in cyber-physical systems (CPSs) arise from the exploitation of cyber and physical components of such systems. Knowledge about how such incidents arose is rarely captured and used systematically to enhance security and support future incident investigations. In this paper, we propose an approach to represent and share incidents knowledge. Our approach captures incident patterns -common aspects of incidents occurring in different CPSs. Our approach then allows incident patterns to be instantiated for different systems to assess if and how such patterns can manifest again. To support our approach, we provide two meta-models that represent, respectively, incident patterns and the cyber-physical systems themselves. The incident meta-model captures the characteristics of incidents, such as assets and activities. The system meta-model captures cyber and physical components and their interactions, which may be exploited during an incident. We demonstrate the feasibility of our approach in the application domain of smart buildings, by tailoring the system meta-model to represent components and interactions in this domain. CCS CONCEPTS• Software and its engineering → Model-driven software engineering KEYWORDS

show abstract

Section: Discussionmentioning

confidence: 99%

I've seen this before

Alrimawi

Pasquale

Mehta

et al. 2018

Proceedings of the 1st International Workshop on Security Awareness From Design to Deployment

Self Cite

View full text Add to dashboard Cite

show abstract

“…Other verification tecniques for self-adaptive CPSs. Tsigkanos et al [36] use bigraphical reactive systems to represent topological relationships of cyber-physical systems. They apply explicit state model checking to reason about security threats brought by changes in the topological relationships that may occur at runtime.…”

Section: Related Workmentioning

confidence: 99%

“…Techniques for modelling self-adaptive systems using rigid modules (e.g., [21]) do not work well for CPSs where different groupings of concurrent cyber and physical components may need to be considered to satisfy each system requirement. Existing work to verify self-adaptive CPS [36] uses explicit state model checking. This can lead to state explosion and may not be computationally feasible for large-scale systems.…”

Section: Introductionmentioning

confidence: 99%

Compositional verification of self-adaptive cyber-physical systems

Borda

Pasquale

Koutavas

et al. 2018

Proceedings of the 13th International Conference on Software Engineering for Adaptive and Self-Managing Systems

Self Cite

View full text Add to dashboard Cite

Cyber-Physical Systems (CPSs) must often self-adapt to respond to changes in their operating environment. However, using formal verification techniques to provide assurances that critical requirements are satisfied can be computationally intractable due to the large state space of self-adaptive CPSs. In this paper we propose a novel language, Adaptive CSP, to model self-adaptive CPSs modularly and provide a technique to support compositional verification of such systems. Our technique allows system designers to identify (a subset of) the CPS components that can affect satisfaction of given requirements, and define adaptation procedures of these components to preserve the requirements in the face of changes to the system's operating environment. System designers can then use Adaptive CSP to represent the system including potential selfadaptation procedures. The requirements can then be verified only against relevant components, independently from the rest of the system, thus enabling computationally tractable verification. Our technique enables the use of existing formal verification technology to check requirement satisfaction. We illustrate this through the use of FDR, a refinement checking tool. To achieve this, we provide an adequate translation from a subset of Adaptive CSP to the language of FDR. Our technique allows system designers to identify alternative adaptation procedures, potentially affecting different sets of CPS components, for each requirement, and compare them based on correctness and optimality. We demonstrate the feasibility of our approach using a substantive example of a smart art gallery. Our results show that our technique reduces the computational complexity of verifying self-adaptive CPSs and can support the design of adaptation procedures.

show abstract

“…Bigraphs are a universal computational model, defined by Milner [16], for modeling interacting systems that evolve in time and space, and have been applied to model a wide range of systems, e.g. IoT/Edge systems [17]- [19], MixedReality systems [20], context-aware systems [21], networking [22], [23], and security of Cyber-Physical systems [24], [25]. Relationships between entities, e.g.…”

Section: Introductionmentioning

confidence: 99%

BigraphTalk: Verified Design of IoT Applications

Archibald

Shieh

et al. 2020

IEEE Internet Things J.

View full text Add to dashboard Cite

Graphical IoT device management platforms, such as IoTtalk, make it easy to describe interactions between IoT devices. Applications are defined by dragging-and-dropping devices and specifying how they are connected, e.g. a door sensor controlling a light. While this allows simple and rapid development, it remains possible to specify unwanted device configurations -such as using the same device to drive a motor up and down simultaneously, risking damaging the motor.We propose BigraphTalk, a verification framework for IoTtalk that utilizes formal techniques, based on bigraphs, to statically guarantee that unwanted configurations do not arise. In particular, we check for invalid connections between devices, as well as type errors, e.g. passing a float to a boolean switch. To the best of our knowledge, BigraphTalk is the first platform to support the graphical specification of correct-by-design IoT applications.BigraphTalk provides fully automated verification and feedback without end-users ever needing to specify a bigraph. This means any application, specifiable in IoTtalk, is guaranteed, so long as verification succeeds, not to violate the given configuration constraints when deployed; with no extra cost to the user.

show abstract

On the Interplay Between Cyber and Physical Spaces for Adaptive Security

Cited by 48 publications

References 48 publications

I've seen this before

I've seen this before

Compositional verification of self-adaptive cyber-physical systems

BigraphTalk: Verified Design of IoT Applications

Contact Info

Product

Resources

About