论文标题
网络物理系统安全建模的基本挑战
Fundamental Challenges of Cyber-Physical Systems Security Modeling
论文作者
论文摘要
系统建模实践缺少可以与建模语言交互的安全分析工具，以通过设计来促进安全性。在安全关键的网络物理系统的时代，设计安全性是必不可少的，在这种情况下，违反安全性可能会导致危险。目前，安全性和安全性之间的重叠是狭窄的。但是，部署网络物理系统意味着当今的对手可以故意触发事故。通过为建模语言实施安全评估工具，我们可以更好地解决系统生命周期中的威胁，因此，确保其最终部署中的安全和安全行为。我们认为，网络物理系统安全建模的实践不足，因为它仍然与信息技术系统相似。
Systems modeling practice lacks security analysis tools that can interface with modeling languages to facilitate security by design. Security by design is a necessity in the age of safety critical cyber-physical systems, where security violations can cause hazards. Currently, the overlap between security and safety is narrow. But deploying cyber-physical systems means that today's adversaries can intentionally trigger accidents. By implementing security assessment tools for modeling languages we are better able to address threats earlier in the system's lifecycle and, therefore, assure their safe and secure behavior in their eventual deployment. We posit that cyber-physical systems security modeling is practiced insufficiently because it is still addressed similarly to information technology systems.
