Safety and security risk assessment in cyber-physical systems

• Published in: IET Cyber-Physical Systems: Theory & Applications Vol. 4; no. 3; pp. 221 - 232
• Main Authors: Lyu, Xiaorong, Ding, Yulong, Yang, Shuang-Hua
• Format: Journal Article
• Language: English
• Published: Southampton The Institution of Engineering and Technology 01.09.2019; John Wiley & Sons, Inc; Wiley
• Subjects: computer networks; Confidentiality; Convergence; CPS complexity; Cyber-physical systems; Cybersecurity; Design; Embedded systems; Failure; Industrial safety; integrated computational capabilities; Logic; physical capabilities; physical objects; Review Article; Risk assessment; risk management; safety incidents; Safety management; safety-critical system; security attacks; security of data; security risk assessment; security-critical system; Smart grid; system openness; Transportation safety; China; security attacks; risk management; physical capabilities; computer networks; safety incidents; cyber-physical systems; security of data; CPS complexity; physical objects; safety-critical system; system openness; security risk assessment; integrated computational capabilities; security-critical system
• ISSN: 2398-3396; 2398-3396
• DOI: 10.1049/iet-cps.2018.5068

The term cyber physical systems (CPS) refers to a new generation of systems with integrated computational and physical capabilities through computation, communication, and control. In the past decades, related techniques for CPS have been well studied and developed, and are widely applied in the fields such as industrial automation, smart transportation, aerospace, environment monitoring, and smart grids. However, with the expansion of CPS complexity and the enhancement of the system openness, most of CPS become not only safety-critical but also security-critical since deeply involving both physical objects and computer networks. In the last decade, it is no longer rare to see safety incidents and security attacks happening in industries. Safety and security issues are increasingly converging on CPS, leading to new situations in which these two closely interdependent issues should now be considered together, rather than separately or in sequence. This paper reviews the existing approaches of risk assessment and management from the perspective of safety, security, and their integration. The comparisons of these approaches are summarised with their pros and cons before the technical gaps between the demand and the current situation of safety and security issues in CPS are identified.