SysML-Sec: A model driven approach for designing safe and secure systems

MODELSWARD 2015 - 3rd International Conference on Model-Driven Engineering and Software Development, Proceedings

Volumn , Issue , 2015, Pages 655-664

  Roudier, Yves ^a   Apvrille, Ludovic ^b  

^a EURECOM   (France)

^b TELECOM PARISTECH   (France)

Author keywords

Embedded systems; Model driven engineering; Safety; Security; SysML

Indexed keywords

ACCIDENT PREVENTION; EMBEDDED SYSTEMS; ITERATIVE METHODS; SAFETY ENGINEERING;

AUTOMOTIVE SYSTEMS; DESIGN AND DEVELOPMENT; INTEGRATING SECURITY; MODEL DRIVEN APPROACH; MODEL-DRIVEN ENGINEERING; SAFETY AND SECURITIES; SECURITY; SYSML;

SOFTWARE DESIGN;

EID: 84939500992     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.5220/0005402006550664     Document Type: Conference Paper

References (37)

1. Apvrille, A. and Strazzere, T. (2012). Reducing the window of opportunity for android malware. gotta catch'em all. Journal in Computer Virology, 8(1-2):61-71.
2. Apvrille, L. and Becoulet, A. (2012). Prototyping an Embedded Automotive System from its UML/SysML Models. In ERTSS'2012, Toulouse, France.
3. Apvrille, L. and De Saqui Sannes, P. (2011). AVATAR/TTool : un environnement en mode libre pour SysML temps réel. Génie Logiciel, (98):22-26.
4. Apvrille, L. and De Saqui-Sannes, P. (2013). Requirements analysis. Embedded Systems: Analysis and Modeling with SysML, UML and AADL.
5. Apvrille, L., Mifdaoui, A., and De Saqui-Sannes, P. (2010). Real-time distributed systems dimensioning and validation: The turtle method. Studia Informatica Universalis, 8(3):47-69.
6. Apvrille, L., Muhammad, W., Ameur-Boulifa, R., Coudert, S., and Pacalet, R. (2006). A UML-Based Environment for System Design Space Exploration. In Electronics, Circuits and Systems, 2006. ICECS '06. 13th IEEE International Conference on, pages 1272-1275.
7. Apvrille, L. and Roudier, Y. (2013). SysML-Sec: A SysML environment for the design and development of secure embedded systems. In APCOSEC 2013, Yokohama, Japan.
8. Armando, A., Basin, D., Boichut, Y., Chevalier, Y., Compagna, L., Cuellar, J., Drielsma, P., Hem, P., Kouchnarenko, O., Mantovani, J., Mdersheim, S., Oheimb, D., Rusinowitch, M., Santiago, J., Turuani, M., Vigan, L., and Vigneron, L. (2005). The avispa tool for the automated validation of internet security protocols and applications. In Etessami, K. and Rajamani, S., editors, Computer Aided Verification, volume 3576 of Lecture Notes in Computer Science, pages 281-285. Springer Berlin Heidelberg.
9. Assolini, F. (2012). The Tale of One Thousand and One DSL Modems, kaspersky lab.
10. Balarin, F., Watanabe, Y., Hsieh, H., Lavagno, L., Passerone, C., and Sangiovanni-Vincentelli, A. (2003). Metropolis: An Integrated Electronic System Design Environment. Computer, 36(4):45-52.
11. Beck, K. and Andres, C. (2004). Extreme Programming Explained: Embrace Change (2nd Edition). Addison-Wesley Professional.
12. Bengtsson, J. and Yi., W. (2004). Timed automata: Semantics, algorithms and tools. In Lecture Notes on Concurrency and Petri Nets, pages 87-124. W. Reisig and G. Rozenberg (eds.), LNCS 3098, Springer-Verlag.
13. Blanchet, B. (2009). Automatic Verification of Correspondences for Security Protocols. Journal of Computer Security, 17(4):363-434.
14. D. P. Eames, D. P. and Moffett, J. (1999). The integration of safety and security requirements. In SAFECOMP, pages 468-480.
15. Esser, S. (2011). Exploiting the iOS Kernel. In BlackHat 2011.
16. Garavel, H., Lang, F., Mateescu, R., and Serwe, W. (2007). CADP 2006: A Toolbox for the Construction and Analysis of Distributed Processes. In Proceedings of the 19th International Conference on Computer Aided Verification CAV 2007.
17. Huang, A. (2002). Keeping Secrets in Hardware: the Microsoft XBox Case Study, AI Memo 2002-008, Massachusetts Institute of Technology, Artificial Intelligence Laboratory. Technical report.
18. Jaber, C. (2011). High-Level SoC Modeling and Performance Estimation Applied to a Multi-CoreImplementation of LTE EnodeB Physical Layer. PhD thesis, Telecom ParisTech.
19. Kelling, E., Friedewald, M., Leimbach, T., Menzel, M., Säger, P., Seudié, H., and Weyl, B. (2009). Specification and Evaluation of e-Security Relevant Use cases. Technical Report Deliverable D2.1, EVITA Project.
20. Knorreck, D., Apvrille, L., and De Saqui-Sannes, P. (2011). TEPE: A SysML Language for Time-Constrained Property Modeling and Formal Verification. ACM SIGSOFT Software Engineering Notes, 36(1):1-8.
21. Leboudec, J. and Thiran, P. (2001). Network Calculus. Springer Verlag LNCS volume 2050.
22. Maslennikov, D. (2010). Russian cybercriminals on the move: profiting from mobile malware. In The 20th Virus Bulletin Internation Conference, pages 84-89, Vancouver, Canada.
23. Maynor, D. (2006). Scada security and terrorism: We're not crying wolf! In Invited presentation at BlackHat BH 2006. Presentation available at: https://www.blackhat.com/presentations/bh-federal-06/BH-Fed-06-Maynor-Graham-up.pdf, USA.
24. Nhlabatsi, A., Nuseibeh, B., and Yu, Y. (2010). Security Requirements Engineering for Evolving Software Systems: a survey. Technical Report 1, The Open University.
25. Nuseibeh, B. (2001). Weaving Together Requirements and Architectures. IEEE Computer, 34(3):115-117.
26. OMG (2005). OMG Profile for Scheduling, Performance and Time. In http://www.omg.org/spec/SPTP/.
27. OMG (2012). OMG Systems Modeling Language. In http://www.sysml.org/specs/.
28. Pedroza, G. (2013). Assisting the design of secured applications for mobile vehicles. In Ph.D. of Ecole doctorale informatique, télécommunications et électronique of Paris.
29. Pietre-Cambacedes, L. and Bouissou, M. (2013). Crossfertilization between safety and security engineering. Rel. Eng. & Sys. Safety, 110:110-126.
30. Proofpoint (2014). Your Fridge is Full of SPAM: Proof of An IoT-driven Attack. In http://www.proofpoint.com/threatinsight/posts/yourfridge-is-full-of-spam-proof-of-a-Iot-drivenattack.php.
31. Raspotnig, C. and Opdahl, A. L. (2013). Comparing risk identification techniques for safety and security requirements. Journal of Systems and Software, 86(4):1124-1151.
32. Schneier, B. (1999). Attack Trees: Modeling Security Threats.
33. Schweppe, H., Roudier, Y., Weyl, B., Apvrille, L., and Scheuermann, D. (2011). C2X communication: Securing the last meter. In The 4th IEEE International Symposium on Wireless Vehicular Communications: WIVEC2011, San Francisco, USA.
34. Teso, H. (2013). Aircraft Hacking. In HITB Security Conference, Amsterdam, The Netherlands.
35. Van Lamsweerde, A. (2007). Engineering Requirements for System Reliability and Security. Software System Reliability and Security, 9:196-238.
36. Vidal, J., de Lamotte, F., Gogniat, G., Soulard, P., and Diguet, J.-P. (2009). A Co-Design Approach for Embedded System Modeling and Code Generation with UML and MARTE. In Design, Automation and Test in Europe Conference and Exhibition, 2009. DATE'09, pages 226-231.
37. Waters, K. (2012). All About Agile: Agile Management Made Easy! CreateSpace Independent Publishing Platform.