An Approach to Quantify Cybersecurity Risk in Terms of Functional Safety Requirement in Connected System

• Item type: Symposium(1)
• 公開日: 2018-06-27
• タイトル: An Approach to Quantify Cybersecurity Risk in Terms of Functional Safety Requirement in Connected System
• 言語: eng
• キーワード / 主題Scheme: Other
• キーワード / 主題: サイバーセキュリティ
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_5794
• 資源タイプ: conference paper
• 著者所属: Hitachi, Ltd. Research & Development Group
• 著者所属: Hitachi, Ltd. Research & Development Group
• 著者所属: Hitachi, Ltd. Research & Development Group
• 著者所属: Hitachi, Ltd. Research & Development Group
• 著者所属: Hitachi, Ltd. Research & Development Group
• 著者名: Yiwen, Chen; Takashi, Kawauchi; Chinatsu, Yamauchi; Satoshi, Kai; Eriko, Ando
• 著者名(英): Yiwen, Chen; Takashi, Kawauchi; Chinatsu, Yamauchi; Satoshi, Kai; Eriko, Ando
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: A connected control system brings about real-time information change with external world but it also brings about cyber threats giving damage on functional safety or even jeopardizing human’s life. Under consideration of cybersecurity risk damaging on functional safety, we establish a risk classification scheme called Cybersecurity Level (CSL) to interpret how secure a connected system is. CSL is classified into multiple levels according to attack success period which is regarded as a criteria of quantified cybersecurity risk in terms of functional safety requirement. We propose an approach to evaluate attack success period and validate feasibility of the approach by utilizing a connected system as first trial. Through our approach, we are able to quantitatively validate necessity and sufficiency of security controls throughout entire system DevOps phase, and further clarify efficient means to reduce cybersecurity risk and enhance secure level of a connected system.
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: A connected control system brings about real-time information change with external world but it also brings about cyber threats giving damage on functional safety or even jeopardizing human’s life. Under consideration of cybersecurity risk damaging on functional safety, we establish a risk classification scheme called Cybersecurity Level (CSL) to interpret how secure a connected system is. CSL is classified into multiple levels according to attack success period which is regarded as a criteria of quantified cybersecurity risk in terms of functional safety requirement. We propose an approach to evaluate attack success period and validate feasibility of the approach by utilizing a connected system as first trial. Through our approach, we are able to quantitatively validate necessity and sufficiency of security controls throughout entire system DevOps phase, and further clarify efficient means to reduce cybersecurity risk and enhance secure level of a connected system.
• 書誌情報: マルチメディア，分散協調とモバイルシンポジウム2018論文集; 巻 2018, p. 1149-1154, 発行日 2018-06-27
• 出版者 / 言語: ja
• 出版者: 情報処理学会