Multiple Security Domain Nondeducibility Air Traffic Surveillance Systems
Multiple Security Domain Nondeducibility Air Traffic Surveillance Systems
复制标题
多安全域不可推论空中交通监视系统
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
B. McMillin
中科院分区：
文献类型：
--
作者：
Anusha Thudimilla;B. McMillin
传统的安全模型将安全领域划分为两个完全不同的世界：高级别和低级别。这种划分是绝对的、完整的。更复杂的情况，比如那些出现在网络物理系统（CPS）中的情况，更好地被视为越来越安全的领域。在CPS中，安全分区经常重叠，并且高低区分不好。本文利用多安全域非演绎推理（MSDND）作为一个模型，以确定信息流的多个分区，如那些发生在CPS。MSDND应用于广播式自动相关监视（ADS-B）空中交通监视系统在各种物理和网络安全漏洞下的选定方面，以确定何时可以和不能推断实际操作状态。它也是为了确定需要哪些附加信息输入和飞行物理学来确定实际的操作状态。几种破坏系统完整性的故障场景被认为是使用不变量的缓解。
Traditional security models partition the securityuniverse into two distinct and completely separate worlds: highand low level. This partition is absolute and complete. Morecomplex situations, such as those that arise in cyber-physicalsystems (CPS) are better treated as sets of increasingly moresecure domains. In a CPS, security partitions often overlap andthe high-low distinction does not hold well. This paper utilizes Multiple Security Domain Nondeducibility(MSDND) as a model to determine information flow amongmultiple partitions, such as those that occur in a CPS. MSDND isapplied to selected aspects of Automatic Dependent Surveillance-Broadcast(ADS-B) air traffic surveillance system under variousphysical and cyber security vulnerabilities to determine when theactual operational state can, and cannot be, deduced. It is alsoused to determine what additional information inputs and flightphysics are needed to determine the actual operational state. Several failure scenarios violating the integrity of the system areconsidered with mitigation using invariants.