Architecture-based attack propagation and variation analysis for identifying confidentiality issues in Industry 4.0

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216208%3A11320%2F23%3A10474024" target="_blank" >RIV/00216208:11320/23:10474024 - isvavai.cz</a>

Výsledek na webu

<a href="https://verso.is.cuni.cz/pub/verso.fpl?fname=obd_publikace_handle&handle=mQBFS.bTJy" target="_blank" >https://verso.is.cuni.cz/pub/verso.fpl?fname=obd_publikace_handle&handle=mQBFS.bTJy</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1515/auto-2022-0135" target="_blank" >10.1515/auto-2022-0135</a>

Jazyk výsledku

angličtina

Název v původním jazyce

Architecture-based attack propagation and variation analysis for identifying confidentiality issues in Industry 4.0

Popis výsledku v původním jazyce

Exchanging data between entities is an essential part of Industry 4.0. However, the data exchange should not affect the confidentiality. Therefore, data should only be shared with the intended entities. In exceptional scenarios, it is unclear whether data should be shared or not and what the impact of the access decision is. Runtime access control systems such as role-based access control often do not consider the impact on the overall confidentiality. Static design-time analyses often provide this information. We use architectural design-time analyses together with an uncertainty variation metamodel mitigating uncertainty to calculate impact properties of attack paths. Runtime access control approaches can then use this information to support the access control decision. We evaluated our approach on four case studies based on real-world examples and research cases.

Název v anglickém jazyce

Architecture-based attack propagation and variation analysis for identifying confidentiality issues in Industry 4.0

Popis výsledku anglicky

Exchanging data between entities is an essential part of Industry 4.0. However, the data exchange should not affect the confidentiality. Therefore, data should only be shared with the intended entities. In exceptional scenarios, it is unclear whether data should be shared or not and what the impact of the access decision is. Runtime access control systems such as role-based access control often do not consider the impact on the overall confidentiality. Static design-time analyses often provide this information. We use architectural design-time analyses together with an uncertainty variation metamodel mitigating uncertainty to calculate impact properties of attack paths. Runtime access control approaches can then use this information to support the access control decision. We evaluated our approach on four case studies based on real-world examples and research cases.

Druh

J_imp - Článek v periodiku v databázi Web of Science

CEP obor

—

OECD FORD obor

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Projekt

<a href="/cs/project/GC20-24814J" target="_blank" >GC20-24814J: FluidTrust - popora důvěry pomocí dynamicky proměnlivého řízení přistupu k datům a zdrojům v systémech Průmyslu 4.0</a><br>

Návaznosti

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Rok uplatnění

2023

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název periodika

AT-Automatisierungstechnik

ISSN

0178-2312

e-ISSN

2196-677X

Svazek periodika

71

Číslo periodika v rámci svazku

6

Stát vydavatele periodika

DE - Spolková republika Německo

Počet stran výsledku

10

Strana od-do

443-452

Kód UT WoS článku

001004217900003

EID výsledku v databázi Scopus

2-s2.0-85161539803