Systems‐theoretic security requirements modeling for cyber‐physical systems. Issue 5 (8th August 2019)

• Record Type: Journal Article
• Authors: Carter, Bryan T.; Bakirtzis, Georgios; Elks, Carl R.; Fleming, Cody H.
• Is Part Of: Systems engineering. Volume 22:Issue 5(2019)
• Page Start: 411
• Page End: 421
• Publication Date: 2019-08-08
• Subjects: cybersecurity -- cyber‐physical system -- security analysis -- SysML -- system modeling; Systems engineering -- Periodicals; 620.0011
• DOI: 10.1002/sys.21504
• Languages: English
• ISSNs: 1098-1241

Abstract

Abstract: Cyber‐physical systems (CPS) present a unique modeling challenge due to their numerous heterogeneous components, complex physical interactions, and disjoint communication networks. Modeling CPS to aid security analysis further adds to these challenges, because securing CPS requires not only understanding of the system architecture, but also the system's role within its broader expected service. This is due to the infeasibility of completely securing every single component, network, and part within a CPS. As such it is necessary to be cognizant of the system's expected service, or mission, so that the effects of an exploit can be mitigated and the system can perform its mission at least in a partially degraded manner—in other words, a mission‐aware approach to security. As such, a security analysis methodology based on this philosophy is greatly aided by the creation of a model that combines system architecture information, its admissible behaviors, and its mission context. This paper presents a technique for creating such a model using the Systems Modeling Language.