Benefits of security-informed safety-oriented process line engineering

摘要

Nowadays, given the growing aircraft connectivity, security-informed safety is crucial. To certify aircrafts, safety as well as security standards need to be taken into consideration. In this context, a process engineer has to succeed in mastering the growing complexity of the standards interplay. To support process engineers, we propose to: first, consider a common terminological framework, aimed at reconciling security and safety within dependability; then identify and systematize commonalities and variabilities between the processes. To enable this systematization we introduce Security-informed Safety-oriented Process Line Engineering (SiSoPLE), which extends SoPLE to address security concerns. To show the effectiveness and benefits of SiSoPLE, we apply this new process line engineering to two aerospace standards, SAE ARP 4761 (Safety) and RTCA DO-326A (Security). We then provide our lessons learned and concluding remarks. Finally, we sketch some perspectives for future investigation.