The SHIELD framework: How to control Security, Privacy and Dependability in complex systems

Abstract

The purpose of this paper is to present the SHIELD holistic approach: an innovative methodology to address Security, Privacy and Dependability (SPD) in the context of Embedded Systems (ES) by means of control science theory. The SHIELD methodology consider the SPD functionalities offered by the generic atomic component of a complex system at 3 different levels: node, network and middleware. Then these technologies are enhanced with a fourth vertical layer named overlay that provides composability functionality, thus creating a framework able to dynamically reconfigure to satisfy the user needs in terms of SPD, in different scenarios. In order to achieve this objective, the use of specific SPD metrics (derived from recognized standards for security, like the ISO/IEC 15408), is proposed. The results presented in this work have been developed in the scope of the pSHIELD ARTEMIS-JU project and are currently under investigation in the nSHIELD project. ?????? 2012 IEEE

Integrated protection of industrial control systems from cyber-attacks: the ATENA approach

“…The COMP module grants the off-line security by means of two functionalities. First it quantifies the current CI security level according to properly defined metrics; second, given the potential threats and countermeasures, it computes the optimal CI configuration to assure a desired, static, security level, exploiting the approach of composable security introduced in [25,26].…”

SPD-driven Smart Transmission Layer based on a Software Defined Radio Test Bed Architecture

“…Validation of the concepts developed within the nSHIELD project will be demonstrated by the means of four independent scenarios/demonstrators: For page limitation purposes, we are omitting a more detailed outlook on the demonstrators, and the project's ideas and methodologies as a whole. These may, however, be found at (nSHIELD Consortium, 2012), (Fiaschetti et al, 2012), (Esposito et al, 2013), (Flammini et al, 2011). The focus is instead placed on the implementational details of the SPD-driven Smart Transmission Layer, and the corresponding test bed architecture, discussed in more detail in the next section.…”

The impact of data complexity on privacy management in vehicle to infrastructure applications

“…The challenge at this point is, whenever general data, such as status information or location information, is combined with sensitive information like personal data, this new individual driving data cluster becomes sensitive as well. In other words, an increase in data complexity also results in an increase in security complexity [1]. In order to protect these clusters, new security classes need to be determined based upon the need for secure storage, access control, and required protection level.…”