Abstract:Safety-critical systems, such as the railway signal system, are subject to potentially high costs from failures, including loss of life and property damage. The use of new technology, including communication-based train control (CBTC) systems with software and computers, has changed the types of accidents that occur. Software-related issues and dysfunctional interactions between system components controlled by the software are increasingly the cause of incidents. Developing a "safe" safety-critical system requires accurate and complete safety requirements, which are the foundation of system development. Traditional hazard analysis techniques are insufficient for identifying the causes of accidents in modern railway signaling systems. Systems-Theoretic Process Analysis (STPA) is a powerful new hazard analysis method designed to address these limitations. Building upon this foundation, a hierarchical approach to safety requirement development has been further developed. This approach combines STPA analysis with a hierarchical modeling approach to establish traceability links from safety requirements to specific architectures, refine and allocate system-level safety requirements to relevant subsystems, and abstract safety requirements at higher hierarchical levels to enable easy changes to lower-level implementations. This paper employs the aforementioned methodology within the context of the CBTC system, thereby enhancing risk management and hazard analysis, enabling early insights, and facilitating the generation of safety requirements of CBTC System.

An Attack Tree-Based Approach for Vulnerability Assessment of Communication-Based Train Control Systems

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Vulnerability Analysis of Electrical Cyber Physical Systems Using a Simulation Platform.

Vulnerability Assessment of WAMS Communication System in the Energy Internet Based on Attack Tree Model

Quantitative Risk Assessment of Threats on SCADA Systems Using Attack Countermeasure Tree

Study of CTCS-3 Control System Risk Assessment Based Unified Modeling Language

Risk Based Vulnerability Assessment for Hvdc Transmission System

Quantitative Vulnerability Assessment of Cyber Security for Distribution Automation Systems

A Bayesian Attack Tree Based Approach to Assess Cyber-Physical Security of Power System

Analysis of a method for attacking WTB link layers in a train communication network

Computer vulnerability evaluation using fault tree analysis

Developing CBTC system safety requirement hierarchy through STPA methodology

Information System Security Risk Evaluation Based on Attack Tree

Analysis of Security Threats and Vulnerabilities for Train Control and Monitoring Systems

Attack-Defense Trees Based Cyber Security Analysis For Cpss

Risk Assessment Method of Security and Stability Control System Considering the Impact of Cyber Attacks

Computer Network System Security Assessment Method.

Development of a System Vulnerability Analysis Tool for Assessment of Complex Mission Critical Systems

Vulnerability Assessment of Industrial Control System with an Improved CVSS