Abstract:In the early 90s, researchers began to focus on security as an important property to address in combination with safety. Over the years, researchers have proposed approaches to harmonize activities within the safety and security disciplines. Despite the academic efforts to identify interdependencies and to propose combined approaches for safety and security, there is still a lack of integration between safety and security practices in the industrial context, as they have separate standards and independent processes often addressed and assessed by different organizational teams and authorities. Specifically, security concerns are generally not covered in any detail in safety standards potentially resulting in successfully safety-certified systems that still are open for security threats from e.g., malicious intents from internal and external personnel and hackers that may jeopardize safety. In recent years security has again received an increasing attention of being an important issue also in safety assurance, as the open interconnected nature of emerging systems makes them susceptible to security threats at a much higher degree than existing more confined products.This article presents initial ideas on how to extend safety work to include aspects of security during the context establishment and initial risk assessment procedures. The ambition of our proposal is to improve safety and increase efficiency and effectiveness of the safety work within the frames of the current safety standards, i.e., raised security awareness in compliance with the current safety standards. We believe that our proposal is useful to raise the security awareness in industrial contexts, although it is not a complete harmonization of safety and security disciplines, as it merely provides applicable guidance to increase security awareness in a safety context.

Holistic Security Requirements Analysis for Socio-Technical Systems

Security Design Based on Social Modeling

Analysing security requirements patterns based on problems decomposition and composition.

Analyzing security requirements as relationships among strategic actors

System Security Assurance: A Systematic Literature Review

Security Requirements Engineering in the Wild: A Survey of Common Practices

A Business Process-based Method on Security Requirement Analysis of Information Systems

Adaptive and Proactive Security Assessment on Energy Delivery Systems

Inadequate Risk Analysis Might Jeopardize The Functional Safety of Modern Systems

Security Oriented Analysis and Design Framework for Cyber - Physical - Social Enterprise

Towards adaptive and proactive security assessment for energy delivery systems

Eliciting security requirements and tracing them to design: an integration of Common Criteria, heuristics, and UMLsec

Towards a Layered Architectural View for Security Analysis in SCADA Systems

Toward Automated Enforcement of Cyber-Physical Security Requirements for Energy Delivery Systems

Aligning social concerns with information system security: A fundamental ontology for social engineering

Deriving Cyber-security Requirements for Cyber Physical Systems

Examining Cybersecurity of Cyberphysical Systems for Critical Infrastructures Through Work Domain Analysis

A Data-Driven Based Security Situational Awareness Framework for Power Systems

A Hierarchical Framework of Security Situation Assessment for Information System

RESOLUTION OF SAFETY RELEVANT SECURITY THREATS IN THE SYSTEM ARCHITECTURE DESIGN PHASE ON THE EXAMPLE OF AUTOMOTIVE INDUSTRY