mdh.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Inadequate risk analysis might jeopardize the functional safety of modern systems
Mälardalen University, School of Innovation, Design and Engineering, Embedded Systems.ORCID iD: 0000-0003-0757-822X
Mälardalen University, School of Innovation, Design and Engineering, Embedded Systems. SICS, Swedish ICT, Västerås, Sweden.ORCID iD: 0000-0002-7235-6888
Safety integrity AB, Sweden.
SICS, Swedish ICT, Västerås, Sweden.
(English)Manuscript (preprint) (Other academic)
Abstract [en]

In the early 90s, researchers began to focus on security as an important property to address in combination with safety. Over the years, researchers have proposed approaches to harmonize activities within the safety and security disciplines. Despite the academic efforts to identify interdependencies and to propose combined approaches for safety and security, there is still a lack of integration between safety and security practices in the industrial context, as they have separate standards and independent processes often addressed and assessed by different organizational teams and authorities. Specifically, security concerns are generally not covered in any detail in safety standards potentially resulting in successfully safety-certified systems that still are open for security threats from e.g., malicious intents from internal and external personnel and hackers that may jeopardize safety. In recent years security has again received an increasing attention of being an important issue also in safety assurance, as the open interconnected nature of emerging systems makes them susceptible to security threats at a much higher degree than existing more confined products.

This article presents initial ideas on how to extend safety work to include aspects of security during the context establishment and initial risk assessment procedures. The ambition of our proposal is to improve safety and increase efficiency and effectiveness of the safety work within the frames of the current safety standards, i.e., raised security awareness in compliance with the current safety standards. We believe that our proposal is useful to raise the security awareness in industrial contexts, although it is not a complete harmonization of safety and security disciplines, as it merely provides applicable guidance to increase security awareness in a safety context

National Category
Computer Systems
Identifiers
URN: urn:nbn:se:mdh:diva-43121OAI: oai:DiVA.org:mdh-43121DiVA, id: diva2:1305330
Projects
SafeCOP - Safe Cooperating Cyber-Physical Systems using Wireless Communication
Funder
EU, Horizon 2020, 692529 VinnovaAvailable from: 2019-04-16 Created: 2019-04-16 Last updated: 2019-04-16Bibliographically approved

Open Access in DiVA

fulltext(158 kB)12 downloads
File information
File name FULLTEXT01.pdfFile size 158 kBChecksum SHA-512
203034ae4147b18e81eb3f7be4b90ee4e0a840de9e9fca1138427449e8a7d0c25ff3cc3e4329a9501840d207bafbb693340a6c734249ecab3cda315b19b712c4
Type fulltextMimetype application/pdf

Authority records BETA

Hänninen, KajHansson, Hans

Search in DiVA

By author/editor
Hänninen, KajHansson, Hans
By organisation
Embedded Systems
Computer Systems

Search outside of DiVA

GoogleGoogle Scholar
Total: 12 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 41 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf