Computer Safety, Reliability, and Security. SAFECOMP 2022 Workshops - DECSoS, DepDevOps, SASSUR, SENSEI, USDAI, and WAISE Munich, Germany, September 6-9, 2022, Proceedings
Computer Safety, Reliability, and Security. SAFECOMP 2022 Workshops - DECSoS, DepDevOps, SASSUR, SENSEI, USDAI, and WAISE Munich, Germany, September 6-9, 2022, Proceedings
复制标题
计算机安全、可靠性和保密性。
DOI：
10.1007/978-3-031-14862-0_16
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Arnaboldi L
中科院分区：
文献类型：
--
作者：
Arnaboldi L
我们提出了一种方法来结合联合收割机的安全性和安全评估使用领结图。Bowties模型既可以模拟导致中心故障事件的原因，也可以模拟由该事件引起的后果，还可以模拟阻碍事件发生的障碍。蝴蝶结以前被单独用于安全和安全评估，但我们建议在一个单一的模型中进行统一的处理，可以优雅地捕捉几种安全的相互依赖性。我们以2021年10月Facebook DNS关闭为例展示了我们的方法，检查了事件链以及导致中断的安全和安全屏障之间的相互作用。
We present a way to combine security and safety assessments using Bowtie Diagrams. Bowties model both thecausesleading up to a central failure event andconsequenceswhich arise from that event, as well asbarrierswhich impede events. Bowties have previously been used separately for security and safety assessments, but we suggest that a unified treatment in a single model can elegantly capture safety-security interdependencies of several kinds. We showcase our approach with the example of the October 2021 Facebook DNS shutdown, examining the chains of events and the interplay between the security and safety barriers which caused the outage.