Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis

Amna Altaf; Shamal Faily; Huseyin Dogan; Eylem Thron; Alexios Mylonas

doi:10.1007/978-3-030-95484-0_4

Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis

Amna Altaf, Shamal Faily, Huseyin Dogan, Eylem Thron, Alexios Mylonas

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Systems-Theoretic Process Analysis (STPA) helps mitigate identified safety hazards leading to unfortunate situations. Usually, a systematic step-by-step approach is followed by safety experts irrespective of any software based tool-support, but identified hazards should be associated with security risks and human factors issues. In this paper, a design framework using Integrating Requirements and Information Security (IRIS) and open source Computer Aided Integration of Requirements and Information Security (CAIRIS) tool-support is used to facilitate the application of STPA. Our design framework lays the foundation for resolving safety, security and human factors issues for critical infrastructures. We have illustrated this approach with a case study based on real life Cambrian Coast Line Railway incident.

Original language	English
Title of host publication	Computer Security. ESORICS 2021 International Workshops
Editors	Sokratis Katsikas, Costas Lambrinoudakis, Nora Cuppens, John Mylopoulos, Christos Kalloniatis, Weizhi Meng, Steven Furnell, Frank Pallas, Jörg Pohle, M. Angela Sasse, Habtamu Abie, Silvio Ranise, Luca Verderame, Enrico Cambiaso, Jorge Maestre Vidal, Marco Antonio Sotelo Monge
Place of Publication	Germany
Publisher	Springer Nature
Pages	58-73
Number of pages	16
Volume	13106
ISBN (Electronic)	978-3-030-95484-0
ISBN (Print)	978-3-030-95483-3
DOIs	https://doi.org/10.1007/978-3-030-95484-0_4
Publication status	E-pub ahead of print - 8 Feb 2022
Event	Computer Security. ESORICS 2021 International Workshops - CyberICPS, SECPRE, ADIoT, SPOSE, CPS4CIP, and CDT and SECOMANE - Virtual, Online, Germany Duration: 4 Oct 2021 → 8 Oct 2021 https://link.springer.com/book/10.1007/978-3-030-95484-0

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	13106 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	Computer Security. ESORICS 2021 International Workshops - CyberICPS, SECPRE, ADIoT, SPOSE, CPS4CIP, and CDT and SECOMANE
Abbreviated title	ESORICS 2021
Country/Territory	Germany
City	Virtual, Online
Period	4/10/21 → 8/10/21
Other	This volume includes the accepted contributions, in total 31 full papers and one short paper, to six of these workshops, as follows: • 7th Workshop on the Security of Industrial Control Systems and of Cyber-Physical Systems (CyberICPS 2021); • 5th International Workshop on Security and Privacy Requirements Engineering (SECPRE 2021); • 4th International Workshop on Attacks and Defenses for Internet-of-Things (ADIoT2021); • 3rd Workshop on Security, Privacy, Organizations, and Systems Engineering (SPOSE2021); • 2nd International Workshop on Cyber-Physical Security for Critical Infrastructures Protection (CPS4CIP 2021); and • 1st International Workshop on Cyber Defence Technologies and Secure Communications at the Network Edge (CDT&SECOMANE 2021).
Internet address	https://link.springer.com/book/10.1007/978-3-030-95484-0

Keywords

CAIRIS
Human factors
IRIS
Rail infrastructure
Safety hazards
Security risks
STPA

Access to Document

10.1007/978-3-030-95484-0_4Licence: Unspecified

Cite this

Altaf, A., Faily, S., Dogan, H., Thron, E., & Mylonas, A. (2022). Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. In S. Katsikas, C. Lambrinoudakis, N. Cuppens, J. Mylopoulos, C. Kalloniatis, W. Meng, S. Furnell, F. Pallas, J. Pohle, M. A. Sasse, H. Abie, S. Ranise, L. Verderame, E. Cambiaso, J. Maestre Vidal, & M. A. Sotelo Monge (Eds.), Computer Security. ESORICS 2021 International Workshops (Vol. 13106, pp. 58-73). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 13106 LNCS). Springer Nature . Advance online publication. https://doi.org/10.1007/978-3-030-95484-0_4

Altaf, Amna ; Faily, Shamal ; Dogan, Huseyin et al. / Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. Computer Security. ESORICS 2021 International Workshops. editor / Sokratis Katsikas ; Costas Lambrinoudakis ; Nora Cuppens ; John Mylopoulos ; Christos Kalloniatis ; Weizhi Meng ; Steven Furnell ; Frank Pallas ; Jörg Pohle ; M. Angela Sasse ; Habtamu Abie ; Silvio Ranise ; Luca Verderame ; Enrico Cambiaso ; Jorge Maestre Vidal ; Marco Antonio Sotelo Monge. Vol. 13106 Germany : Springer Nature , 2022. pp. 58-73 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{bfb47c81eb8d4d928019fd9dbc0aa2ef,

title = "Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis",

abstract = "Systems-Theoretic Process Analysis (STPA) helps mitigate identified safety hazards leading to unfortunate situations. Usually, a systematic step-by-step approach is followed by safety experts irrespective of any software based tool-support, but identified hazards should be associated with security risks and human factors issues. In this paper, a design framework using Integrating Requirements and Information Security (IRIS) and open source Computer Aided Integration of Requirements and Information Security (CAIRIS) tool-support is used to facilitate the application of STPA. Our design framework lays the foundation for resolving safety, security and human factors issues for critical infrastructures. We have illustrated this approach with a case study based on real life Cambrian Coast Line Railway incident.",

keywords = "CAIRIS, Human factors, IRIS, Rail infrastructure, Safety hazards, Security risks, STPA",

author = "Amna Altaf and Shamal Faily and Huseyin Dogan and Eylem Thron and Alexios Mylonas",

note = "{\textcopyright} 2022, Springer Nature Switzerland AG.; Computer Security. ESORICS 2021 International Workshops - CyberICPS, SECPRE, ADIoT, SPOSE, CPS4CIP, and CDT and SECOMANE, ESORICS 2021 ; Conference date: 04-10-2021 Through 08-10-2021",

year = "2022",

month = feb,

day = "8",

doi = "10.1007/978-3-030-95484-0_4",

language = "English",

isbn = "978-3-030-95483-3",

volume = "13106",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Nature ",

pages = "58--73",

editor = "Sokratis Katsikas and Costas Lambrinoudakis and Nora Cuppens and John Mylopoulos and Christos Kalloniatis and Weizhi Meng and Steven Furnell and Frank Pallas and J{\"o}rg Pohle and Sasse, {M. Angela} and Habtamu Abie and Silvio Ranise and Luca Verderame and Enrico Cambiaso and {Maestre Vidal}, Jorge and {Sotelo Monge}, {Marco Antonio}",

booktitle = "Computer Security. ESORICS 2021 International Workshops",

address = "Netherlands",

url = "https://link.springer.com/book/10.1007/978-3-030-95484-0",

}

Altaf, A, Faily, S, Dogan, H, Thron, E & Mylonas, A 2022, Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. in S Katsikas, C Lambrinoudakis, N Cuppens, J Mylopoulos, C Kalloniatis, W Meng, S Furnell, F Pallas, J Pohle, MA Sasse, H Abie, S Ranise, L Verderame, E Cambiaso, J Maestre Vidal & MA Sotelo Monge (eds), Computer Security. ESORICS 2021 International Workshops. vol. 13106, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 13106 LNCS, Springer Nature , Germany, pp. 58-73, Computer Security. ESORICS 2021 International Workshops - CyberICPS, SECPRE, ADIoT, SPOSE, CPS4CIP, and CDT and SECOMANE, Virtual, Online, Germany, 4/10/21. https://doi.org/10.1007/978-3-030-95484-0_4

Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. / Altaf, Amna; Faily, Shamal; Dogan, Huseyin et al.
Computer Security. ESORICS 2021 International Workshops. ed. / Sokratis Katsikas; Costas Lambrinoudakis; Nora Cuppens; John Mylopoulos; Christos Kalloniatis; Weizhi Meng; Steven Furnell; Frank Pallas; Jörg Pohle; M. Angela Sasse; Habtamu Abie; Silvio Ranise; Luca Verderame; Enrico Cambiaso; Jorge Maestre Vidal; Marco Antonio Sotelo Monge. Vol. 13106 Germany: Springer Nature , 2022. p. 58-73 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 13106 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis

AU - Altaf, Amna

AU - Faily, Shamal

AU - Dogan, Huseyin

AU - Thron, Eylem

AU - Mylonas, Alexios

PY - 2022/2/8

Y1 - 2022/2/8

N2 - Systems-Theoretic Process Analysis (STPA) helps mitigate identified safety hazards leading to unfortunate situations. Usually, a systematic step-by-step approach is followed by safety experts irrespective of any software based tool-support, but identified hazards should be associated with security risks and human factors issues. In this paper, a design framework using Integrating Requirements and Information Security (IRIS) and open source Computer Aided Integration of Requirements and Information Security (CAIRIS) tool-support is used to facilitate the application of STPA. Our design framework lays the foundation for resolving safety, security and human factors issues for critical infrastructures. We have illustrated this approach with a case study based on real life Cambrian Coast Line Railway incident.

AB - Systems-Theoretic Process Analysis (STPA) helps mitigate identified safety hazards leading to unfortunate situations. Usually, a systematic step-by-step approach is followed by safety experts irrespective of any software based tool-support, but identified hazards should be associated with security risks and human factors issues. In this paper, a design framework using Integrating Requirements and Information Security (IRIS) and open source Computer Aided Integration of Requirements and Information Security (CAIRIS) tool-support is used to facilitate the application of STPA. Our design framework lays the foundation for resolving safety, security and human factors issues for critical infrastructures. We have illustrated this approach with a case study based on real life Cambrian Coast Line Railway incident.

KW - CAIRIS

KW - Human factors

KW - IRIS

KW - Rail infrastructure

KW - Safety hazards

KW - Security risks

KW - STPA

UR - http://www.scopus.com/inward/record.url?scp=85125243561&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-95484-0_4

DO - 10.1007/978-3-030-95484-0_4

M3 - Conference contribution

AN - SCOPUS:85125243561

SN - 978-3-030-95483-3

VL - 13106

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 58

EP - 73

BT - Computer Security. ESORICS 2021 International Workshops

A2 - Katsikas, Sokratis

A2 - Lambrinoudakis, Costas

A2 - Cuppens, Nora

A2 - Mylopoulos, John

A2 - Kalloniatis, Christos

A2 - Meng, Weizhi

A2 - Furnell, Steven

A2 - Pallas, Frank

A2 - Pohle, Jörg

A2 - Sasse, M. Angela

A2 - Abie, Habtamu

A2 - Ranise, Silvio

A2 - Verderame, Luca

A2 - Cambiaso, Enrico

A2 - Maestre Vidal, Jorge

A2 - Sotelo Monge, Marco Antonio

PB - Springer Nature

CY - Germany

T2 - Computer Security. ESORICS 2021 International Workshops - CyberICPS, SECPRE, ADIoT, SPOSE, CPS4CIP, and CDT and SECOMANE

Y2 - 4 October 2021 through 8 October 2021

ER -

Altaf A, Faily S, Dogan H, Thron E, Mylonas A. Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. In Katsikas S, Lambrinoudakis C, Cuppens N, Mylopoulos J, Kalloniatis C, Meng W, Furnell S, Pallas F, Pohle J, Sasse MA, Abie H, Ranise S, Verderame L, Cambiaso E, Maestre Vidal J, Sotelo Monge MA, editors, Computer Security. ESORICS 2021 International Workshops. Vol. 13106. Germany: Springer Nature . 2022. p. 58-73. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). Epub 2022 Feb 8. doi: 10.1007/978-3-030-95484-0_4

Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this