Towards Experimental Assessment of Security Threats in Protecting the Critical Infrastructure

摘要

Security is a system and software property essential in protecting infrastructure critical to the nation's business and everyday operation. It is often related to and overlapping with other trustworthiness properties, such as safety and/or reliability. Mutual relationships of these properties and their interactions in real world systems have been studied by multiple authors in a recent decade; however, they are rarely viewed jointly in the context of critical infrastructure. The objective of this paper is to take a closer look at the relationship of security with safety in computing systems, and present a unified view for further research. In particular, the paper presents an overview of the state-of-the-art and focuses on the discussion of the unifying architecture, which leads to interesting observations how security and safety are related. Preliminary experiments on using safety concepts to assess security in industrial control systems with monitoring tools are discussed.