SysML-Sec - A Model Driven Approach for Designing Safe and Secure Systems

Yves Roudier, Ludovic Apvrille

2015

Abstract

Security flaws are open doors to attack embedded systems and must be carefully assessed in order to determine threats to safety and security. Subsequently securing a system, that is, integrating security mechanisms into the system’s architecture can itself impact the system’s safety, for instance deadlines could be missed due to an increase in computations and communications latencies. SysML-Sec addresses these issues with a model-driven approach that promotes the collaboration between system designers and security experts at all design and development stages, e.g., requirements, attacks, partitioning, design, and validation. A central point of SysML-Sec is its partitioning stage during which safety-related and security-related functions are explored jointly and iteratively with regards to requirements and attacks. Once partitioned, the system is designed in terms of system’s functions and security mechanisms, and formally verified from both the safety and the security perspectives. Our paper illustrates the whole methodology with the evaluation of a security mechanism added to an existing automotive system.

Paper Citation

in Harvard Style

Roudier Y. and Apvrille L. (2015). SysML-Sec - A Model Driven Approach for Designing Safe and Secure Systems . In Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development - Volume 1: SPIE, (MODELSWARD 2015) ISBN 978-989-758-083-3, pages 655-664. DOI: 10.5220/0005402006550664

in Bibtex Style

@conference{spie15,
author={Yves Roudier and Ludovic Apvrille},
title={SysML-Sec - A Model Driven Approach for Designing Safe and Secure Systems},
booktitle={Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development - Volume 1: SPIE, (MODELSWARD 2015)},
year={2015},
pages={655-664},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005402006550664},
isbn={978-989-758-083-3},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development - Volume 1: SPIE, (MODELSWARD 2015)
TI - SysML-Sec - A Model Driven Approach for Designing Safe and Secure Systems
SN - 978-989-758-083-3
AU - Roudier Y.
AU - Apvrille L.
PY - 2015
SP - 655
EP - 664
DO - 10.5220/0005402006550664