Automatically Generated Safety Mechanisms from Semi-Formal Software Safety Requirements

Author(s):  
Raphael Fonte Boa Trindade ◽  
Lukas Bulwahn ◽  
Christoph Ainhauser
2018 ◽  
Vol 20 (1) ◽  
pp. 46-69 ◽  
Author(s):  
Christian Raspotnig ◽  
Peter Karpati ◽  
Andreas L Opdahl

Safety is a fundamental concern in modern society, and security is a precondition for safety. Ensuring safety and security of complex integrated systems requires a coordinated approach that involve different stakeholder groups going beyond safety and security experts and system developers. The authors have therefore proposed CHASSIS (Combined Harm Assessment of Safety and Security for Information Systems), a method for collaborative determination of requirements for safe and secure systems. In this article, the authors evaluate CHASSIS through industrial case studies of two small-to-medium sized suppliers to the air-traffic management (ATM) sector. The results suggest that CHASSIS is easy to use, and that handling safety and security together provides benefits because techniques, information, and knowledge can be reused. The authors conclude that further exploration and development of CHASSIS is worthwhile, but that better documentation is needed—including more detailed process guidelines—to support elicitation of security and safety requirements and to systematically relate them to functional requirements.


Author(s):  
M. Z. Bjelica ◽  
B. Mrazovac ◽  
V. Vojnovic ◽  
N. Teslic ◽  
V. Jelovac

Author(s):  
Christian Raspotnig ◽  
Peter Karpati ◽  
Andreas L Opdahl

Safety is a fundamental concern in modern society, and security is a precondition for safety. Ensuring safety and security of complex integrated systems requires a coordinated approach that involve different stakeholder groups going beyond safety and security experts and system developers. The authors have therefore proposed CHASSIS (Combined Harm Assessment of Safety and Security for Information Systems), a method for collaborative determination of requirements for safe and secure systems. In this article, the authors evaluate CHASSIS through industrial case studies of two small-to-medium sized suppliers to the air-traffic management (ATM) sector. The results suggest that CHASSIS is easy to use, and that handling safety and security together provides benefits because techniques, information, and knowledge can be reused. The authors conclude that further exploration and development of CHASSIS is worthwhile, but that better documentation is needed—including more detailed process guidelines—to support elicitation of security and safety requirements and to systematically relate them to functional requirements.


Sign in / Sign up

Export Citation Format

Share Document