On the role of latent design conditions in cyber-physical systems security
On the role of latent design conditions in cyber-physical systems security
复制标题
潜在设计条件在网络物理系统安全中的作用
DOI：
10.1145/2897035.2897036
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Frey S
中科院分区：
文献类型：
--
作者：
Frey S
随着网络物理系统（CPS）在日常生活中变得越来越普遍，了解可能影响此类系统安全性的因素至关重要。在本文中，我们提出的见解，从历史安全事件的初步研究，以分析这些因素为一类特殊的CPS：工业控制系统（ICS）。我们的研究挑战了通常的倾向，指责人类的不可靠性或诉诸简单的解释，往往是复杂的问题，导致安全事故。我们强调，（一）感知错误是关键，在这样的事件（二）潜在的设计条件，例如，不正确的规格系统的边界和能力，发挥了根本性的作用，在塑造的看法，导致安全问题。这种设计时的考虑对于ICS尤其重要，其生命周期通常以几十年为单位。在此分析的基础上，我们讨论了未来智能CPS在这种工业环境中的关键特征如何在解决潜在的设计缺陷方面带来进一步的挑战。
As cyber-physical systems (CPS) become prevalent in everyday life, it is critical to understand the factors that may impact the security of such systems. In this paper, we present insights from an initial study of historical security incidents to analyse such factors for a particular class of CPS: industrial control systems (ICS). Our study challenges the usual tendency to blame human fallibility or resort to simple explanations for what are often complex issues that lead to a security incident. We highlight that (i) perception errors are key in such incidents (ii) latent design conditions–eg, improper specifications of a system’s borders and capabilities–play a fundamental role in shaping perceptions, leading to security issues. Such design-time considerations are particularly critical for ICS, the life-cycle of which is usually measured in decades. Based on this analysis, we discuss how key characteristics of future smart CPS in such industrial settings can pose further challenges with regards to tackling latent design flaws.