Integrating Security in Resource-Constrained Cyber-Physical Systems

Security in Cyber-Physical Systems

Information Security is a domain of IT that has a well developed body of knowledge, and a cadre of practitioners with significant experience in securing IT systems. Cyber Physical Systems (CPS) also has a well developed body of knowledge and a well trained cadre of professionals that have been successfully running systems for years. These are two separate groups that would benefit from working ...

Focus: Safety & Security in Cyber-physical Systems

Modeling security in cyber-physical systems

This paper describes a framework for modeling the security of a cyber–physical system in which the behavior of the adversary is controlled by a threat model that captures – in a unified manner – the cyber aspects (with discrete values) and the physical aspects (with continuous values) of the cyber–physical system. In particular, the framework addresses combined (dependent) vector attacks and sy...

Designed-in Security for Cyber-Physical Systems

T here are at least two types of security vulnerabilities: flawed or insufficient software behavior specifications that allow compromise—for example, authentication that is lacking or that can be spoofed—and incorrect implementation of specifications— buffer overflows being a classic example and Heartbleed being a notable recent one. The sad truth is that the state of the art in specification d...

Challenges in Security for Cyber-Physical Systems

The design of security for cyber-physical systems must take into account several characteristics common to such systems. Among these are feedback between the cyber and physical environment, distributed management and control, uncertainty, real-time requirements, and geographic distribution. This paper discusses these characteristics and suggests a design approach that better integrates security...