A Systematic Mapping Study on Security Requirements Engineering Frameworks for Cyber-Physical Systems

2018 ◽  
pp. 428-442 ◽  
Author(s):  
Shafiq Rehman ◽  
Volker Gruhn ◽  
Saad Shafiq ◽  
Irum Inayat
Keyword(s):  
Requirements Engineering ◽  
Cyber Physical Systems ◽  
Security Requirements ◽  
Systematic Mapping Study ◽  
Mapping Study ◽  
Systematic Mapping ◽  
Physical Systems ◽  
Security Requirements Engineering

scholarly journals Reusable knowledge in security requirements engineering: a systematic mapping study

2015 ◽  
Vol 21 (2) ◽  
pp. 251-283 ◽  
Author(s):  
Amina Souag ◽  
Raúl Mazo ◽  
Camille Salinesi ◽  
Isabelle Comyn-Wattiau
Keyword(s):  
Requirements Engineering ◽  
Security Requirements ◽  
Systematic Mapping Study ◽  
Mapping Study ◽  
Systematic Mapping ◽  
Security Requirements Engineering

scholarly journals A Systematic Mapping Study on the Verification of Cyber-Physical Systems

IEEE Access ◽  
2018 ◽  
Vol 6 ◽  
pp. 59043-59064 ◽  
Author(s):  
Pengfei Duan ◽  
Ying Zhou ◽  
Xufang Gong ◽  
Bixin Li
Keyword(s):  
Cyber Physical Systems ◽  
Systematic Mapping Study ◽  
Mapping Study ◽  
Systematic Mapping ◽  
Physical Systems

scholarly journals An Effective Security Requirements Engineering Framework for Cyber-Physical Systems

Technologies ◽  
2018 ◽  
Vol 6 (3) ◽  
pp. 65 ◽  
Author(s):  
Shafiq Rehman ◽  
Volker Gruhn
Keyword(s):  
Requirements Engineering ◽  
Research Direction ◽  
Cyber Physical Systems ◽  
Third Party ◽  
Security Requirements ◽  
Physical Systems ◽  
Requirements Evolution ◽  
Security Requirements Engineering ◽  
Secure Software Engineering ◽  
Network Channel

Context and motivation: Cyber-Physical Systems (CPSs) are gaining priority over other systems. The heterogeneity of these systems increases the importance of security. Both the developer and the requirement analyst must consider details of not only the software, but also the hardware perspective, including sensor and network security. Several models for secure software engineering processes have been proposed, but they are limited to software; therefore, to support the processes of security requirements, we need a security requirements framework for CPSs. Question/Problem: Do existing security requirements frameworks fulfil the needs of CPS security requirements? The answer is no; existing security requirements frameworks fail to accommodate security concerns outside of software boundaries. Little or even no attention has been given to sensor, hardware, network, and third party elements during security requirements engineering in different existing frameworks. Principal Ideas/results: We have proposed, applied, and assessed an incremental security requirements evolution approach, which configures the heterogeneous nature of components and their threats in order to generate a secure system. Contribution: The most significant contribution of this paper is to propose a security requirements engineering framework for CPSs that overcomes the issue of security requirements elicitation for heterogeneous CPS components. The proposed framework supports the elicitation of security requirements while considering sensor, receiver protocol, network channel issues, along with software aspects. Furthermore, the proposed CPS framework has been evaluated through a case study, and the results are shown in this paper. The results would provide great support in this research direction.

Sign in / Sign up

Export Citation Format

Share Document