Fluchs Sarah, Taştan Emre, Trumpf Tobias, Horch Alexander, Drath Rainer, Fay Alexander
Institute of Automation, Helmut-Schmidt-University, 22043 Hamburg, Germany.
admeritia GmbH, 40764 Langenfeld (Rheinland), Germany.
Sensors (Basel). 2023 Jun 13;23(12):5547. doi: 10.3390/s23125547.
"Security by design" is the term for shifting cybersecurity considerations from a system's end users to its engineers. To reduce the end users' workload for addressing security during the systems operation phase, security decisions need to be made during engineering, and in a way that is traceable for third parties. However, engineers of cyber-physical systems (CPSs) or, more specifically, industrial control systems (ICSs) typically neither have the security expertise nor time for security engineering. The security-by-design decisions method presented in this work aims to enable them to identify, make, and substantiate security decisions autonomously. Core features of the method are a set of function-based diagrams as well as libraries of typical functions and their security parameters. The method, implemented as a software demonstrator, is validated in a case study with the specialist for safety-related automation solutions HIMA, and the results show that the method enables engineers to identify and make security decisions they may not have made (consciously) otherwise, and quickly and with little security expertise. The method is also well suited to make security-decision-making knowledge available to less experienced engineers. This means that with the security-by-design decisions method, more people can contribute to a CPS's security by design in less time.
“设计即安全”是指将网络安全考量从系统的终端用户转移至工程师。为了减轻终端用户在系统运行阶段处理安全问题的工作量，需要在工程阶段做出安全决策，并且要以一种可被第三方追溯的方式进行。然而，网络物理系统（CPS）的工程师，或者更具体地说，工业控制系统（ICS）的工程师，通常既没有安全专业知识，也没有时间进行安全工程。本文提出的设计即安全决策方法旨在使他们能够自主识别、做出并证实安全决策。该方法的核心特性包括一组基于功能的图表以及典型功能及其安全参数的库。该方法作为一个软件演示器得以实现，并在与安全相关自动化解决方案专家HIMA的案例研究中得到验证，结果表明该方法能使工程师识别并做出他们原本（可能无意识地）不会做出的安全决策，而且能在安全专业知识有限的情况下快速做出决策。该方法也非常适合将安全决策知识传授给经验较少的工程师。这意味着通过设计即安全决策方法，更多人能够在更短的时间内为CPS的设计安全做出贡献。
