Abstract
The paper addresses the issue of evaluating Safety Integrity Levels (SIL) from the perspective of concerns related jointly to safety and security. We apply the Non-Functional Requirements (NFR) approach, which relies on evaluation of both safety and security at the architectural level. Used in two case studies on industrial automation systems, the results show that the method yields reasonable results, no weaker than other methods of SIL evaluation, such as risk graphs, and can be used for both SIL determination and verification.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
IEC 61508-4: Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems. International Electrotechnical Commission (2010)
IEC 60050: International Electrotechnical Vocabulary. Online: http://www.electropedia.org/
Torres-Echeverria, A.C.: On the use of LOPA and risk graphs for SIL determination. J. Loss Prev. Process Ind. 41, 333–343 (2016)
Gabriel, A., Ozansoy, C., Shi, J.: Developments in SIL determination and calculation. Reliab. Eng. Syst. Safety 177, 148–161 (2018)
Kriaa, S., Pietre-Cambacedes, L., Bouissou, M., Halgand, Y.: A survey of approaches combining safety and security for industrial control systems. Reliab. Eng. Syst. Safety 139, 156–178 (2015)
Braband, J.: What’s security level got to do with safety integrity level? Proceedings of the ERTS 2016, 8th European Congress on Embedded Real-Time Software and Systems, Toulouse, France, 27–29 January 2016
Reichenbach, F., et al.: A pragmatic approach on combined safety and security risk analysis. In: Proceedings of the 2012 IEEE 23rd Intern. Symposium on Software Reliability Engineering Workshops, Dallas, Texas, pp. 239–244, 27–30 November 2012
Piesik, E., Śliwiński, M., Barnert, T.: Determining and verifying the safety integrity level of the safety instrumented systems with the uncertainty and security aspects. Reliab. Eng. Syst. Safety 152, 259–272 (2016)
Sliwinski, M., Piesik, E., Piesik, J.: Integrated functional safety and cyber security analysis. IFAC Papers OnLine 51, 1263–1270 (2018)
Subramanian, N., Zalewski, J.: Quantitative assessment of safety and security of system architectures for cyberphysical systems using the NFR approach. IEEE Syst. J. 10(2), 397–409 (2016)
Subramanian, N., Zalewski, J.: Safety and security analysis of control chains in SCADA using the NFR approach. IFAC Papers OnLine 51(6), 214–219 (2018)
Lisova, E., Sljivo, I., Causevic, A.: Safety and security co-analyses: a systematic literature review. IEEE Syst. J., December 2018
Pedroza, G.: Towards safety and security co-engineering: challenging aspects for a consistent intertwining. In: Proceedings of the ESORICS 2018 International Workshops, ISSA 2018 and CSITS 2018, Barcelona, Spain, pp. 3–16, 6–7 September 2018
ETSI TS 102 165-1: CYBER Methods and Protocols. Part 1: Method and Pro Forma for Threat, Vulnerability, Risk Analysis (TVRA). Technical Specification. European Telecommunications Standards Institute (2017)
IEC 62443: Network and System Security for Industrial-process Measurement and Control. International Electrotechnical Commission (2015)
ISO/IEC 15408: Information Technology—Security Techniques—Evaluation Criteria for IT Security. International Organization for Standardization (2009)
Chung, L., et al.: Non-functional requirements in software engineering. Kluwer Academic Publishers, Boston (2000)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this chapter
Cite this chapter
Subramanian, N., Zalewski, J. (2020). Safety and Security Integrated SIL Evaluation Using the NFR Approach. In: Jarzabek, S., Poniszewska-Marańda, A., Madeyski, L. (eds) Integrating Research and Practice in Software Engineering. Studies in Computational Intelligence, vol 851. Springer, Cham. https://doi.org/10.1007/978-3-030-26574-8_5
Download citation
DOI: https://doi.org/10.1007/978-3-030-26574-8_5
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-26573-1
Online ISBN: 978-3-030-26574-8
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)