Security Requirements Engineering: A Framework for Cyber-Physical Systems
Shafiq ur Réhman, Christopher Allgaier, Volker Gruhn · 2018
Cyber-physical systems (CPS) are complex evolution of classical software systems. These systems integrate the physical layer with software systems, generating the ability for software developers to complete large tasks by combining new aspects of CPS with old design philosophies. These systems offer great potential for many new features and advantages. On the other hand, CPS involves security risks. Many new attack scenarios are made possible by an unsecured and uncharted physical layer. In this paper, we analysed four security requirements engineering methods for software development (UMLsec, CLASP, SQUARE, SREP). The best aspects of these methods are combined and special CPS security parameters are inserted. The main contribution of this research is to develop a security requirements engineering framework for cyber-physical systems. The result is a new methodology designed for the development of a secure CPS, called "CPS Framework". The proposed framework is an extension of SREP. Furthermore, the proposed framework is evaluated using a case study and compared to other most important security requirements methods. The promising results are shown in this paper. The achieving results contribute to assist in this research direction. The proposed CPS framework is a good start to focus greater attention on this important aspect of CPS and great support to the research community.