Security Requirements Engineering: A Framework for Cyber-Physical Systems

Abstract

I would firstly like to thank God-Almighty for not only the ability, but also the constant strength and perseverance that kept me going through this thesis.Further, I would like to express my deepest gratitude to my supervisor, Professor Volker Gruhn, who has been a steady guide through the course of my research and has always been supportive of my academic endeavours -no matter which corner of the Earth they led me to -thereby allowing me to interact with and learn from excellent researchers in my field from around the globe. I am thankful for dedicating his time and effort and for always making me feel welcome at his office. I would also like to express my appreciation for Professor Matthias Book, who not only offered deep critical insights through his review of my thesis, but also went out of his way to make available to me certain academic opportunities that I found to be extremely valuable.I would also like to extend my thanks to all my colleagues in Paluno. It has been a great experience working with and exchanging ideas with them. All the talks, discussions and dissertation seminars have been invaluable experiences for me.Last but not least, I would like to give thanks to my family, particularly my mother, who has always been a pillar of support for me, and without whom I would not be where I stand today. I thank her for her prayers, her emotional support and for always giving me advice when I hit a rough patch in life and don't know what to do. My wife too, has been a constant source of strength for me, a companion, a friend and both a mother and father for my children in my absence. I thank her for all of this and for not killing me when I told her I would be living in a different country for the next three years. I'd like to thank my daughter Eshal and my son Shaheer for bearing with me patiently and not holding against me the time I could not give them in pursuit of my doctoral studies.

Defining a set of metrics for detecting attacks at FSC

“…А также с помощью утилит nmap можно просканировать сеть, порты устройств, протоколы передачи данных между устройствами. Из-за чего существует множество ограничений для более широкого промышленного применения КФС на реальных производствах [15] и [16].…”

Definition and Verification of Security Configurations of Cyber-Physical Systems

“…These are annotated in the design model of any system. Other researches developed a security requirements engineering framework for CPSs, that is an extension of SREP [31]. The capacity to support the high variability in the security context though Feature Models appeared in previous papers [23], where the authors study the possible vulnerabilities to create attack scenarios, but not it does not apply to a complex scenario as the CPSs need.…”

Securing Software Development: A Holistic Exploration of Security Awareness in Software Development Teams

“…In recent years, security requirements engineering (SRE) has grown, and security frameworks have been proposed in the academic community and other scientific publications (Rehman et al, 2018). There are now various approaches to security requirements engineering, including "Secure Quality Requirements Engineering" SQUARE, CLASP, secure i*, UMLsec , SREP, secure Tropos and MORSE etc.…”

“…The use of security requirement assurance is increasing in the development of secure critical systems, especially in industries such as transportation systems, medical devices, financial systems, military systems, healthcare, and automotive (Mohamad et al, 2021). Therefore, one of the primary reasons for the success of the threats and attacks is lack of attention to the elicitation and analysis of security requirements (Anderson, 2020), and cannot be neglected any longer (Rehman et al, 2018). The increasing amount of software security threats, along with increased security awareness, implies that software security assurance is no longer an option, but rather a requirement (Khan & Khan, 2018a).…”