论文标题
通过语义丰富的体系结构模式自动化安全和安全共同设计
Automating Safety and Security Co-Design through Semantically-Rich Architecture Patterns
论文作者
论文摘要
在安全至关重要系统的设计期间，安全和保障工程师利用诸如看门狗和防火墙之类的建筑模式来解决已确定的故障和威胁。但是，安全模式的部署通常会对安全产生影响，例如，安全模式的部署可能会导致新的威胁。另一种可能是可能的，即，安全模式的部署可能会导致新的失败。因此，安全和保障共同设计是需要了解此类后果和权衡的，以达到适当的系统设计。当前，使用自然语言描述了模式描述，包括其后果。因此，它们在系统设计中的部署是手动进行的，因此耗时且容易发生人类，尤其是考虑到高系统复杂性。我们建议使用语义丰富的体系结构模式通过使用知识表示和推理（KRR）方法来自动支持安全和安全共同设计。基于我们特定领域的语言，我们将推理原理指定为逻辑规格写为答案集程序。 KRR发动机可以自动化安全和保障共同工程活动，包括自动化的建议，这些建议可以解决部署此类模式的故障或威胁和后果。我们在ISO 21434标准的示例中演示了我们的方法。
During the design of safety-critical systems, safety and security engineers make use of architecture patterns, such as Watchdog and Firewall, to address identified failures and threats. Often, however, the deployment of safety patterns has consequences on security, e.g., the deployment of a safety pattern may lead to new threats. The other way around may also be possible, i.e., the deployment of a security pattern may lead to new failures. Safety and security co-design is, therefore, required to understand such consequences and trade-offs, in order to reach appropriate system designs. Currently, pattern descriptions, including their consequences, are described using natural language. Therefore, their deployment in system design is carried out manually, thus time-consuming and prone to human-error, especially given the high system complexity. We propose the use of semantically-rich architecture patterns to enable automated support for safety and security co-design by using Knowledge Representation and Reasoning (KRR) methods. Based on our domain-specific language, we specify reasoning principles as logic specifications written as answer-set programs. KRR engines enable the automation of safety and security co-engineering activities, including the automated recommendation of which architecture patterns can address failures or threats and consequences of deploying such patterns. We demonstrate our approach on an example taken from the ISO 21434 standard.
