Security-Aware, Model-Based Systems Engineering with SysML
Robert Oates, F. J. Thom, Graham Herries · Electronic workshops in computing · 2013
Addressing the cyber security demands of industrial control systems is a challenging task as the systems are typically built from equipment with limited computational power and integrated into highly complex, infrastructure-critical systems. To ensure the security of such systems, security considerations must form a ubiquitous part of the design and maintenance processes. This work provides an overview of the literature regarding the key issues faced by engineers attempting to secure industrial control systems, appraises work done to integrate cyber security into the systems engineering process and puts forward recommendations for the future of security-aware systems engineering through the extension of SysML to incorporate a Security viewpoint on the model. These recommendations include the presentation of a novel threat model profile that forms the basis of the SysML extensions.