Skip to main content

2019 | OriginalPaper | Buchkapitel

Supporting Cybersecurity Compliance Assessment of Industrial Automation and Control System Components

verfasst von : Janusz Górski, Andrzej Wardziński

Erschienen in: Resilience of Cyber-Physical Systems

Verlag: Springer International Publishing

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

The chapter presents a case study demonstrating how security requirements of an Industrial Automation and Control System (IACS) component can be represented in a form of Protection Profile that is based on IEC 62443 standards and how compliance assessment of such component can be supported by explicitly representing a conformity argument in a form based on the OMG SACM metamodel. It is also demonstrated how an advanced argument assessment mechanism based on Dempster-Shafer belief function theory can be used to support assessors while analyzing and assessing the conformity argument related to an IACS component. These demonstrations use a NOR-STA tool for representing, managing and assessment of evidence-based arguments, which have been developed in our research group.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literatur
1.
Zurück zum Zitat Paul Theron Introduction to the European IACS components Cybersecurity Certification Framework (ICCF). DOI:10.276D/717569 Paul Theron Introduction to the European IACS components Cybersecurity Certification Framework (ICCF). DOI:10.276D/717569
2.
Zurück zum Zitat Structured Assurance Case Metamodel (SACM), version 2.0, Object Management Group (2017) Structured Assurance Case Metamodel (SACM), version 2.0, Object Management Group (2017)
3.
Zurück zum Zitat ISO/IEC 15026 Systems and software engineering – systems and software assurance ISO/IEC 15026 Systems and software engineering – systems and software assurance
5.
Zurück zum Zitat ISO 15408 (2009) Information technology – Security techniques – evaluation criteria for IT security – Part 1: introduction and general model. ISO ISO 15408 (2009) Information technology – Security techniques – evaluation criteria for IT security – Part 1: introduction and general model. ISO
8.
Zurück zum Zitat Cyra L, Górski J (2011) SCF – a framework supporting achieving and assessing conformity with standards. Comput Stand Interfaces Elsevier 33:80–95CrossRef Cyra L, Górski J (2011) SCF – a framework supporting achieving and assessing conformity with standards. Comput Stand Interfaces Elsevier 33:80–95CrossRef
9.
Zurück zum Zitat Ray A, Cleaveland R (2015) Security assurance cases for medical cyber-physical systems. IEEE Des Test 32(5):56–65CrossRef Ray A, Cleaveland R (2015) Security assurance cases for medical cyber-physical systems. IEEE Des Test 32(5):56–65CrossRef
10.
Zurück zum Zitat Finnegan A, Mccaffery F (2014) A security argument pattern for medical device assurance cases, In: 2014 IEEE International symposium on software reliability engineering workshops. IEEE, pp 220–225 Finnegan A, Mccaffery F (2014) A security argument pattern for medical device assurance cases, In: 2014 IEEE International symposium on software reliability engineering workshops. IEEE, pp 220–225
11.
Zurück zum Zitat Othmane L,Angin P,Bhargava B(2014), Using assurance cases to develop iteratively security features using scrum. In: 2014 Ninth international conference on availability, reliability and security (ARES), IEEE Othmane L,Angin P,Bhargava B(2014), Using assurance cases to develop iteratively security features using scrum. In: 2014 Ninth international conference on availability, reliability and security (ARES), IEEE
13.
Zurück zum Zitat IEC 62443-1-1 (2009) Industrial communication networks – Network and system security – Part 1-1: terminology, concepts and models, IEC IEC 62443-1-1 (2009) Industrial communication networks – Network and system security – Part 1-1: terminology, concepts and models, IEC
14.
Zurück zum Zitat IEC 62443-4-2 Technical security requirements for IACS components IEC 62443-4-2 Technical security requirements for IACS components
15.
Zurück zum Zitat Cyra L, Górski J (2011) Support for argument structures review and assessment, reliability engineering and system safety, vol 96. Elsevier, pp 26–37 Cyra L, Górski J (2011) Support for argument structures review and assessment, reliability engineering and system safety, vol 96. Elsevier, pp 26–37
Metadaten
Titel
Supporting Cybersecurity Compliance Assessment of Industrial Automation and Control System Components
verfasst von
Janusz Górski
Andrzej Wardziński
Copyright-Jahr
2019
DOI
https://doi.org/10.1007/978-3-319-95597-1_4