Predictive Formal Analysis of Resilience in Cyber-Physical Systems

Abstract

The behavioral analysis of cyber-physical systems in safety-critical scenarios is a challenging task. In this paper, the endogenous and exogenous aspects of resilience are of cornerstone importance in system design and verification. Endogenous resilience is the inherent ability of the system to detect and process internal faults and malicious attacks. Exogenous resilience is the permanent capability of the system to maintain a safe operation within its ambient environment. In this paper, we present a predictive dual-sided contract-based formal methodology to address both aspects of resilience on top of a distributed object-oriented component-based software model. It is illustrated by a case study of urban drone rescue systems. We exploit the formalism of timed automata and the toolbox UPPAAL to predict by abstraction and analyze (simulate and verify) endogenous resilience. Instead of presenting the final models of the case study, we reflect our experience with UPPAAL in generic patterns of system design and contract specification, reusable in other contexts with adaptations. The analysis of exogenous resilience is specific to the considered drone rescue system. It consists of synthesizing by iterative model-checking safe flight paths for the drones within a 3D virtual model of urban surroundings true to modern cities. INDEX TERMS Resilience, safety, distributed control, object-oriented software, component-based architectures, design by contracts, timed automata, 3D models, model-checking, temporal logic, fairness.

Context-Based Resilience in Cyber-Physical Production System

“…A recent ever-growing interest has been devoted to resilience challenges [2,14,15], often related to the notion of self-adaptation, as witnessed by an increasing number of surveys on this topic [16][17][18][19]. Targets of recent approaches addressing CPS resilience vary from cyber-security [20][21][22][23], to cyberphysical power systems [24,25] and to cyber-physical production systems [26][27][28][29][30]. The first ones are focused on security issues at runtime on the communication layer or to implement resource balancing strategies between the edge and cloud computing layers.…”

Revue Systématique de la Littérature sur le Soutien à la Sécurité des Opérations de Drones

“…Les méthodes d'analyses de sécurité représentent 14.14% des approches. Il s'agit de moyens pour évaluer les risques avant la construction des drones [69] et des systèmes [102], ou avant les opérations [4] avec des cartes de risques au sol en cas d'impact [36,66,88] ou encore des méthodes formelles pour prédire la résilience des systèmes [81]. Ces méthodes concernent aussi l'exécution des opérations avec un système de recommandation utilisant les méthodes formelles [54].…”

Architecture assessment for safety critical plant operation using reachability analysis of timed automata

“…Indeed, as many architectures have to be evaluated during the engineering process, a major issue is then the ability of modelers to easily build and modify the system model (for example by adding or removing component models). Pattern-based modeling, combined with a structured modeling framework, seems to be a very efficient way to allow a plug-and-play approach to compose models from a library of generic and reusable models: [32,33,34]. These models must have standard interfaces to ensure their interoperability and can be adapted and composed according to the architecture to be modelled.…”