Sökning: WFRF:(Inayat Irum) >
A security risk mit...
A security risk mitigation framework for cyber physical systems
-
- Zahid, Maryam (författare)
- National University of Computer and Emerging Sciences, Islamabad, Pakistan
-
- Inayat, Irum (författare)
- National University of Computer and Emerging Sciences, FAST, Islamabad, Pakistan,SEAL
-
- Daneva, Maryam (författare)
- School of Computer Science, Services and Cyber Security Group, University of Twente, Enschede, Netherlands
-
visa fler...
-
- Mehmood, Zahid (författare)
- University of Lahore, Islamabad, Pakistan
-
visa färre...
-
(creator_code:org_t)
- 2019-08-29
- 2020
- Engelska.
-
Ingår i: Journal of Software. - : John Wiley & Sons. - 2047-7473 .- 2047-7481. ; 32:2, s. 1-15
- Relaterad länk:
-
https://doi.org/10.1...
-
visa fler...
-
https://urn.kb.se/re...
-
https://doi.org/10.1...
-
visa färre...
Abstract
Ämnesord
Stäng
- Cyber physical systems (CPSs) are safety‐critical, be it weapon systems, smart medical devices, or grid stations. This makes ensuring security of all the components constituting a CPS unavoidable. The rise in the demand of interconnectedness has made such systems vulnerable to attacks, ie, cyberattacks. Over 170 cases of cyber‐security breaches in CPS were reported over the past two decades. An increase in the number of cyberattack incidents on CPS makes them more exposed and less trustworthy. However, identifying the security requirements of the CPS to pinpoint the relevant risks may help to counteract the potential attacks. Literature reveals that the most targeted security requirements of CPS are authentication, integrity, and availability. However, little attention has been paid on certain crucial security attributes such as data freshness and nonrepudiation. One major reason of security breaches in CPS is the lack of custom or generalized countermeasures. Therefore, we propose a security risk mitigation framework for a CPS focused on constraints, ie, authentication, data integrity, data freshness, nonrepudiation, and confidentiality. Furthermore, we evaluate the proposed work using a case study of a safety critical system. The results show a decrease in the severity of the identified security risks, ie, man‐in‐the‐middle attack, spoofing, and data tempering.
Ämnesord
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
Nyckelord
- case study
- cryptosystem
- cyber physical systems (CPS)
- cyber security
- risk assessment
- risk identification
- risk management
- risk mitigation
- security
- Computer Science
- datavetenskap
Publikations- och innehållstyp
- ref (ämneskategori)
- art (ämneskategori)
- kfu (ämneskategori)
Hitta via bibliotek
Till lärosätets databas