Top

Published in:

2023 | OriginalPaper | Chapter

Utilising Redundancy to Enhance Security of Safety-Critical Systems

Author : Elena Troubitsyna

Published in: Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops

Publisher: Springer Nature Switzerland

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Abstract

For many safety-critical systems, implementing modern cybersecurity protection mechanisms is hindered by legacy design and high re-certification costs. Since such systems are typically designed to be highly reliable, they usually contain a large number of redundant components used to achieve fault tolerance. In this paper, we discuss challenges in utilising redundancy inherently present in the architectures of safety-critical systems to enhance system cybersecurity protection. We consider classic redundant architectures and analyse their ability to protect against cyberattacks. By evaluating the likelihood of a successful cyberattack on a redundant architecture under different implementation conditions, we conclude that redundancy in combination with diversity has better potential to be utilised for cybersecurity protection.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter Analyzing Origins of Safety and Security Interactions Using Feared Events Trees and Multi-level Model

next chapter Reliability Evaluation of Autonomous Transportation System Architecture Based on Markov Chain

CENELEC - EN 50126–1. Railway Applications - The Specification and Demonstration of Reliability, Availability, Maintainability and Safety (RAMS) - Part 1: Generic RAMS Process

Avizienis, A., Laprie, J.C., Randell, B., Landwehr, C.: Basic concepts and taxonomy of dependable and secure computing. IEEE Trans. Dependable Secure Comput. 1(1), 11–33 (2004). https://doi.org/10.1109/TDSC.2004.2

Storey, N.: Safety-Critical Computer Systems. Addison-Wesley, Boston (1996)

Koren, I., Mani Krishna, C.: Fault tolerant Systems, 2nd ed. Elsevier, Amsterdam (2007)

de Bortoli, A., Bouhaya, L., Feraille, A.: A life cycle model for high-speed rail infra-structure: environmental inventories and assessment of the Tours-Bordeaux railway in France. Int. J. Life Cycle Assess. 25, 814–830 (2020)CrossRef

International Standard., “Industrial communication networks - Network and system se-curity - Part 3–3: System security requirements and security levels,” IEC, Edition 1.0 2013–08

International Standard, “Security for industrial automation and control systems - Part 2–4: Security program requirements for IACS service providers,” IEC, Edition 1.0 2015–06

Amendment 1, “Security for industrial automation and control systems - Part 2–4: Security program requirements for IACS service providers,” IEC, Edition 1.0 2017–08

Oxford Dictionary of Statistics., Oxford University Press (2002)

10.

Littlewood, B.: The impact of diversity upon common mode failures. Reliab. Eng. Syst. Saf. 51(1), 101–113 (1996)CrossRef

11.

Tsoupidi, R.M., Lozano, R.C., Troubitsyna, E., Papadimitratos, P.: Securing Optimized Code Against Power Side Channels. arXiv preprint arXiv:2207.02614

12.

Tsoupidi, R.M., Troubitsyna, E., Papadimitratos, P.: Thwarting code-reuse and side-channel attacks in embedded systems. arXiv preprint arXiv:2304.13458

13.

ENISA Transport Threat Landscape. https://www.enisa.europa.eu/publications/enisa-transport-threat-landscape. Accessed 6 June 2023

14.

Littlewood, B., Strigini, L.: Redundancy and diversity in security. In: European Symposium on Research in Computer Security (2004)

15.

Bain, C., Faatz, D., Fayad, A., Williams, D.: Diversity as a defense strategy in information systems. In: Gertz, M., Guldentops, E., Strous, L. (eds.) Integrity, Internal Control and Security in Information Systems. ITIFIP, vol. 83, pp. 77–93. Springer, Boston, MA (2002). https://doi.org/10.1007/978-0-387-35583-2_5CrossRef

16.

Troubitsyna, E., Laibinis, L., Pereverzeva, I., Kuismin, T., Ilic, D., Latvala, T.: Towards security-explicit formal modelling of safety-critical systems. In: Skavhaug, A., Guiochet, J., Bitsch, F. (eds.) SAFECOMP 2016. LNCS, vol. 9922, pp. 213–225. Springer, Cham (2016). https://doi.org/10.1007/978-3-319-45477-1_17CrossRef

17.

Vistbakka, I., Troubitsyna, E.: Towards a formal approach to analysing security of safety-critical systems. In: 14th European Dependable Computing Conference (EDCC). Iasi, Romania, 2018, pp. 182–189 (2018)

18.

Poorhadi, E., Troubitsyna, E., Dan, G.: Analysing the impact of security attacks on safety using SysML and event-B. In: Seguin, C., Zeller, M., Prosvirnova, T. (eds.) Model-Based Safety and Assessment. IMBSA 2022. LNCS, vol. 13525. Springer, Cham (2022). https://doi.org/10.1007/978-3-031-15842-1_13

Title: Utilising Redundancy to Enhance Security of Safety-Critical Systems
Author: Elena Troubitsyna
Publisher: Springer Nature Switzerland
Book: Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops
Print ISBN: 978-3-031-40952-3

Electronic ISBN: 978-3-031-40953-0

Copyright Year: 2023
DOI: https://doi.org/10.1007/978-3-031-40953-0_16

Springer Professional

Abstract

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner