Safety and Security Co-engineering and Argumentation Framework

H. Martin; R. Bramberger; C. Schmittner; Z. Ma; T. Gruber; A. Ruiz; G. Macher

doi:10.1007/978-3-319-66284-8_24

Safety and Security Co-engineering and Argumentation Framework

H. Martin
, R. Bramberger
, C. Schmittner
, Z. Ma
, T. Gruber
, A. Ruiz
, G. Macher

Quantum

Virtual Vehicle Research Center
Austrian Institute of Technology
AVL List GmbH

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

8 Citations (Scopus)

21 Downloads (Pure)

Abstract

Automotive systems become increasingly complex due to their functional range and data exchange with the outside world. Until now, functional safety of such safety-critical electrical/electronic systems has been covered successfully. However, the data exchange requires interconnection across trusted boundaries of the vehicle. This leads to security issues like hacking and malicious attacks against interfaces, which could bring up new types of safety issues. Before mass-production of automotive systems, arguments supported by evidences are required regarding safety and security. Product engineering must be compliant to specific standards and must support arguments that the system is free of unreasonable risks. This paper shows a safety and security co-engineering framework, which covers standard compliant process derivation and management, and supports product specific safety and security co-analysis. Furthermore, we investigate process- and product-related argumentation and apply the approach to an automotive use case regarding safety and security.

Original language	English
Title of host publication	unknown
Editors	Friedemann Bitsch, Stefano Tonetta, Erwin Schoitsch
Publisher	Springer, Cham
Pages	286-297
Number of pages	12
Volume	10489
ISBN (Electronic)	978-3-319-66284-8
ISBN (Print)	978-3-319-66283-1, 9783319662831
DOIs	https://doi.org/10.1007/978-3-319-66284-8_24
Publication status	Published - 2017
Event	International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2017 and 5th International Workshop on Assurance Cases for Software-Intensive Systems, ASSURE 2017, 12th Workshop on Dependable Embedded and Cyber-physical Systems and Systems-of Systems, DECSoS 2017, 6th International Workshop on Next Generation of System Assurance Approaches for Safety Critical Systems, SASSUR 2017, 3rd International Workshop on Technical and Legal Aspects of Data Privacy and Security, TELERISE 2017 and 2nd International Workshop on the Timing Performance in Safety Engineering, TIPS 2017 - Trento, Italy Duration: 12 Sept 2017 → 12 Sept 2017

Publication series

Name	0302-9743

Conference

Conference	International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2017 and 5th International Workshop on Assurance Cases for Software-Intensive Systems, ASSURE 2017, 12th Workshop on Dependable Embedded and Cyber-physical Systems and Systems-of Systems, DECSoS 2017, 6th International Workshop on Next Generation of System Assurance Approaches for Safety Critical Systems, SASSUR 2017, 3rd International Workshop on Technical and Legal Aspects of Data Privacy and Security, TELERISE 2017 and 2nd International Workshop on the Timing Performance in Safety Engineering, TIPS 2017
Country/Territory	Italy
City	Trento
Period	12/09/17 → 12/09/17

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 7 Affordable and Clean Energy
SDG 9 Industry, Innovation, and Infrastructure
SDG 12 Responsible Consumption and Production

Keywords

Safety and security co-engineering
Process- and product-based argumentation
Process and argumentation patterns
Automotive domain
ISO 26262
SAE J3061
Process-and product-based argumentation

Project and Funding Information

Project ID
info:eu-repo/grantAgreement/EC/FP7/621429/EU/Embedded Multi-Core Systems for Mixed Criticality Applications in Dynamic and Changeable Real-Time Environments/EMC2
info:eu-repo/grantAgreement/EC/H2020/692474/EU/Architecture-driven, Multi-concern and Seamless Assurance and Certification of Cyber-Physical Systems/AMASS
Funding Info
This work is supported by the projects EMC2 and AMASS. Research leading to these results has received funding from the EU ARTEMIS Joint Undertaking under grant agreement no. 621429 (project EMC2), project AMASS (H2020-ECSEL no 692474; Spain’s MINECO ref. PCIN-2015-262) and from the COMET K2 - Competence Centres for Excellent Technologies Programme of the Austrian Federal Ministry for Transport, Innovation and Technology (bmvit), the Austrian Federal Ministry of Science, Research and Economy (bmwfw), the Austrian Research Promotion Agency (FFG), the Province of Styria and the Styrian Business Promotion Agency (SFG).

Access to Document

10.1007/978-3-319-66284-8_24

SpringerFinal published version, 671 KB

Cite this

@inproceedings{ee5100736de646219d54f907bbf6b1ff,

title = "Safety and Security Co-engineering and Argumentation Framework",

abstract = "Automotive systems become increasingly complex due to their functional range and data exchange with the outside world. Until now, functional safety of such safety-critical electrical/electronic systems has been covered successfully. However, the data exchange requires interconnection across trusted boundaries of the vehicle. This leads to security issues like hacking and malicious attacks against interfaces, which could bring up new types of safety issues. Before mass-production of automotive systems, arguments supported by evidences are required regarding safety and security. Product engineering must be compliant to specific standards and must support arguments that the system is free of unreasonable risks. This paper shows a safety and security co-engineering framework, which covers standard compliant process derivation and management, and supports product specific safety and security co-analysis. Furthermore, we investigate process- and product-related argumentation and apply the approach to an automotive use case regarding safety and security.",

keywords = "Safety and security co-engineering, Process- and product-based argumentation, Process and argumentation patterns, Automotive domain, ISO 26262, SAE J3061, Safety and security co-engineering, Process- and product-based argumentation, Process and argumentation patterns, Automotive domain, ISO 26262, SAE J3061, Process-and product-based argumentation",

author = "H. Martin and R. Bramberger and C. Schmittner and Z. Ma and T. Gruber and A. Ruiz and G. Macher",

note = "Publisher Copyright: {\textcopyright} Springer International Publishing AG 2017.; International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2017 and 5th International Workshop on Assurance Cases for Software-Intensive Systems, ASSURE 2017, 12th Workshop on Dependable Embedded and Cyber-physical Systems and Systems-of Systems, DECSoS 2017, 6th International Workshop on Next Generation of System Assurance Approaches for Safety Critical Systems, SASSUR 2017, 3rd International Workshop on Technical and Legal Aspects of Data Privacy and Security, TELERISE 2017 and 2nd International Workshop on the Timing Performance in Safety Engineering, TIPS 2017 ; Conference date: 12-09-2017 Through 12-09-2017",

year = "2017",

doi = "10.1007/978-3-319-66284-8\_24",

language = "English",

isbn = "978-3-319-66283-1",

volume = "10489",

series = "0302-9743",

publisher = "Springer, Cham",

pages = "286--297",

editor = "Friedemann Bitsch and Stefano Tonetta and Erwin Schoitsch",

booktitle = "unknown",

}

Martin, H, Bramberger, R, Schmittner, C, Ma, Z, Gruber, T, Ruiz, A & Macher, G 2017, Safety and Security Co-engineering and Argumentation Framework. in F Bitsch, S Tonetta & E Schoitsch (eds), unknown. vol. 10489, 0302-9743, Springer, Cham, pp. 286-297, International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2017 and 5th International Workshop on Assurance Cases for Software-Intensive Systems, ASSURE 2017, 12th Workshop on Dependable Embedded and Cyber-physical Systems and Systems-of Systems, DECSoS 2017, 6th International Workshop on Next Generation of System Assurance Approaches for Safety Critical Systems, SASSUR 2017, 3rd International Workshop on Technical and Legal Aspects of Data Privacy and Security, TELERISE 2017 and 2nd International Workshop on the Timing Performance in Safety Engineering, TIPS 2017, Trento, Italy, 12/09/17. https://doi.org/10.1007/978-3-319-66284-8_24

TY - GEN

T1 - Safety and Security Co-engineering and Argumentation Framework

AU - Martin, H.

AU - Bramberger, R.

AU - Schmittner, C.

AU - Ma, Z.

AU - Gruber, T.

AU - Ruiz, A.

AU - Macher, G.

N1 - Publisher Copyright: © Springer International Publishing AG 2017.

PY - 2017

Y1 - 2017

N2 - Automotive systems become increasingly complex due to their functional range and data exchange with the outside world. Until now, functional safety of such safety-critical electrical/electronic systems has been covered successfully. However, the data exchange requires interconnection across trusted boundaries of the vehicle. This leads to security issues like hacking and malicious attacks against interfaces, which could bring up new types of safety issues. Before mass-production of automotive systems, arguments supported by evidences are required regarding safety and security. Product engineering must be compliant to specific standards and must support arguments that the system is free of unreasonable risks. This paper shows a safety and security co-engineering framework, which covers standard compliant process derivation and management, and supports product specific safety and security co-analysis. Furthermore, we investigate process- and product-related argumentation and apply the approach to an automotive use case regarding safety and security.

AB - Automotive systems become increasingly complex due to their functional range and data exchange with the outside world. Until now, functional safety of such safety-critical electrical/electronic systems has been covered successfully. However, the data exchange requires interconnection across trusted boundaries of the vehicle. This leads to security issues like hacking and malicious attacks against interfaces, which could bring up new types of safety issues. Before mass-production of automotive systems, arguments supported by evidences are required regarding safety and security. Product engineering must be compliant to specific standards and must support arguments that the system is free of unreasonable risks. This paper shows a safety and security co-engineering framework, which covers standard compliant process derivation and management, and supports product specific safety and security co-analysis. Furthermore, we investigate process- and product-related argumentation and apply the approach to an automotive use case regarding safety and security.

KW - Safety and security co-engineering

KW - Process- and product-based argumentation

KW - Process and argumentation patterns

KW - Automotive domain

KW - ISO 26262

KW - SAE J3061

KW - Safety and security co-engineering

KW - Process- and product-based argumentation

KW - Process and argumentation patterns

KW - Automotive domain

KW - ISO 26262

KW - SAE J3061

KW - Process-and product-based argumentation

UR - https://www.scopus.com/pages/publications/85029540878

U2 - 10.1007/978-3-319-66284-8_24

DO - 10.1007/978-3-319-66284-8_24

M3 - Conference contribution

SN - 978-3-319-66283-1

SN - 9783319662831

VL - 10489

T3 - 0302-9743

SP - 286

EP - 297

BT - unknown

A2 - Bitsch, Friedemann

A2 - Tonetta, Stefano

A2 - Schoitsch, Erwin

PB - Springer, Cham

T2 - International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2017 and 5th International Workshop on Assurance Cases for Software-Intensive Systems, ASSURE 2017, 12th Workshop on Dependable Embedded and Cyber-physical Systems and Systems-of Systems, DECSoS 2017, 6th International Workshop on Next Generation of System Assurance Approaches for Safety Critical Systems, SASSUR 2017, 3rd International Workshop on Technical and Legal Aspects of Data Privacy and Security, TELERISE 2017 and 2nd International Workshop on the Timing Performance in Safety Engineering, TIPS 2017

Y2 - 12 September 2017 through 12 September 2017

ER -

Safety and Security Co-engineering and Argumentation Framework

Abstract

Publication series

Conference

UN SDGs

Keywords

Project and Funding Information

Access to Document

Other files and links

Fingerprint

Cite this