Incorporating a Measure for Attacker Motivation into Software Risk Assessment for Measuring Instruments in Legal Metrology

摘要

Modern measuring instruments mainly rely on software to perform their intended operations. Measuring instruments are thus also susceptible to malicious software-related attacks. Especially in the highly regulated area of legal metrology, risk assessment is one possible tool for assessing the resistance of an instrument to unintended modifications and intentional manipulations. Where previous risk assessment approaches solely relied on the technical features of the instrument, the authors here propose a method that also covers the important influence factor of attacker motivation. Based on two different solutions to the problem, a well-suited method is selected with the help of a short experimental evaluation.