Security-Informed Safety Case Approach to Analysing MILS Systems
- 1. City University London
- 2. Airbus Group Innovations
- 3. Thales Austria GmbH
Description
Safety cases are the development foundation for safety-critical systems and are often quite complex to understand depending on the size of the system and operational conditions. The recent advent of security aspects complicates the issues further. This paper describes an approach to analysing safety and security in a structured way and creating security-informed safety cases that provide justification of safety taking into particular consideration the impact of security. The paper includes an overview of the structured assurance case concept, a security-informed safety methodology and a layered approach to constructing cases. The approach is applied to a Security Gateway that is used to control data flow between security domains in a separation kernel based operating system in avionics environment. We show that a clear and structured way of presenting a safety case combining safety and security alleviates understanding important interactions taking into account the impact and, hence, increases safety.
Files
07-mils15_submission_7.pdf
Files
(430.4 kB)
Name | Size | Download all |
---|---|---|
md5:da33792d66f83f7e56093573e809b9c3
|
430.4 kB | Preview Download |