IDEAS home Printed from https://ideas.repec.org/a/eee/reensy/v139y2015icp156-178.html
   My bibliography  Save this article

A survey of approaches combining safety and security for industrial control systems

Author

Listed:
  • Kriaa, Siwar
  • Pietre-Cambacedes, Ludovic
  • Bouissou, Marc
  • Halgand, Yoran

Abstract

The migration towards digital control systems creates new security threats that can endanger the safety of industrial infrastructures. Addressing the convergence of safety and security concerns in this context, we provide a comprehensive survey of existing approaches to industrial facility design and risk assessment that consider both safety and security. We also provide a comparative analysis of the different approaches identified in the literature.

Suggested Citation

  • Kriaa, Siwar & Pietre-Cambacedes, Ludovic & Bouissou, Marc & Halgand, Yoran, 2015. "A survey of approaches combining safety and security for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 139(C), pages 156-178.
    • Handle: RePEc:eee:reensy:v:139:y:2015:i:c:p:156-178
    DOI: 10.1016/j.ress.2015.02.008
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S0951832015000538
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.ress.2015.02.008?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Trucco, P. & Cagno, E. & Ruggeri, F. & Grande, O., 2008. "A Bayesian Belief Network modelling of organisational factors in risk analysis: A case study in maritime transportation," Reliability Engineering and System Safety, Elsevier, vol. 93(6), pages 845-856.
    2. Nai Fovino, Igor & Masera, Marcelo & De Cian, Alessio, 2009. "Integrating cyber attacks within fault trees," Reliability Engineering and System Safety, Elsevier, vol. 94(9), pages 1394-1402.
    3. Aven, Terje, 2009. "Identification of safety and security critical systems and activities," Reliability Engineering and System Safety, Elsevier, vol. 94(2), pages 404-411.
    4. Piètre-Cambacédès, L. & Bouissou, M., 2013. "Cross-fertilization between safety and security engineering," Reliability Engineering and System Safety, Elsevier, vol. 110(C), pages 110-126.
    5. Aven, Terje, 2007. "A unified framework for risk and vulnerability analysis covering both safety and security," Reliability Engineering and System Safety, Elsevier, vol. 92(6), pages 745-754.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Victor Bolbot & Gerasimos Theotokatos & LA Wennersberg & Jerome Faivre & Dracos Vassalos & Evangelos Boulougouris & Ørnulf Jan Rødseth & Pål Andersen & Ann-Sofie Pauwelyn & Antoon Van Coillie, 2023. "A novel risk assessment process: Application to an autonomous inland waterways ship," Journal of Risk and Reliability, , vol. 237(2), pages 436-458, April.
    2. Cheng, Ruijun & Cheng, Yu & Chen, Dewang & Song, Haifeng, 2021. "Online quantitative safety monitoring approach for unattended train operation system considering stochastic factors," Reliability Engineering and System Safety, Elsevier, vol. 216(C).
    3. Argenti, Francesca & Landucci, Gabriele & Reniers, Genserik & Cozzani, Valerio, 2018. "Vulnerability assessment of chemical facilities to intentional attacks based on Bayesian Network," Reliability Engineering and System Safety, Elsevier, vol. 169(C), pages 515-530.
    4. Wei Wang & Francesco Di Maio & Enrico Zio, 2019. "Adversarial Risk Analysis to Allocate Optimal Defense Resources for Protecting Cyber–Physical Systems from Cyber Attacks," Risk Analysis, John Wiley & Sons, vol. 39(12), pages 2766-2785, December.
    5. Carreras Guzman, Nelson H. & Zhang, Jin & Xie, Jing & Glomsrud, Jon Arne, 2021. "A Comparative Study of STPA-Extension and the UFoI-E Method for Safety and Security Co-analysis," Reliability Engineering and System Safety, Elsevier, vol. 211(C).
    6. Peter Blokland & Genserik Reniers, 2019. "An Ontological and Semantic Foundation for Safety and Security Science," Sustainability, MDPI, vol. 11(21), pages 1-25, October.
    7. SICARD, Franck & ZAMAI, Éric & FLAUS, Jean-Marie, 2019. "An approach based on behavioral models and critical states distance notion for improving cybersecurity of industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 188(C), pages 584-603.
    8. Fan, Shiqi & Yang, Zaili, 2022. "Safety and security co-analysis in transport systems: Current state and regulatory development," Transportation Research Part A: Policy and Practice, Elsevier, vol. 166(C), pages 369-388.
    9. Iaiani, Matteo & Tugnoli, Alessandro & Macini, Paolo & Cozzani, Valerio, 2021. "Outage and asset damage triggered by malicious manipulation of the control system in process plants," Reliability Engineering and System Safety, Elsevier, vol. 213(C).
    10. Siwar Kriaa & Marc Bouissou & Youssef Laarouchi, 2019. "A new safety and security risk analysis framework for industrial control systems," Journal of Risk and Reliability, , vol. 233(2), pages 151-174, April.
    11. Georgios Kavallieratos & Sokratis Katsikas & Vasileios Gkioulos, 2020. "Cybersecurity and Safety Co-Engineering of Cyberphysical Systems—A Comprehensive Survey," Future Internet, MDPI, vol. 12(4), pages 1-17, April.
    12. Alanen, Jarmo & Linnosmaa, Joonas & Malm, Timo & Papakonstantinou, Nikolaos & Ahonen, Toni & Heikkilä, Eetu & Tiusanen, Risto, 2022. "Hybrid ontology for safety, security, and dependability risk assessments and Security Threat Analysis (STA) method for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 220(C).
    13. Wang, Wei & Cammi, Antonio & Di Maio, Francesco & Lorenzi, Stefano & Zio, Enrico, 2018. "A Monte Carlo-based exploration framework for identifying components vulnerable to cyber threats in nuclear power plants," Reliability Engineering and System Safety, Elsevier, vol. 175(C), pages 24-37.
    14. Chatterjee, Samrat & Thekdi, Shital, 2020. "An iterative learning and inference approach to managing dynamic cyber vulnerabilities of complex systems," Reliability Engineering and System Safety, Elsevier, vol. 193(C).
    15. A.N. Kuz'minov & V.M.Dzhukha & O.A. Ternovsky, 2017. "Methodology of Structural Stability Management for Industrial Enterprises," European Research Studies Journal, European Research Studies Journal, vol. 0(3B), pages 260-268.
    16. Bolbot, Victor & Theotokatos, Gerasimos & Bujorianu, Luminita Manuela & Boulougouris, Evangelos & Vassalos, Dracos, 2019. "Vulnerabilities and safety assurance methods in Cyber-Physical Systems: A comprehensive review," Reliability Engineering and System Safety, Elsevier, vol. 182(C), pages 179-193.
    17. Marcin Śliwiński & Emilian Piesik, 2021. "Designing Control and Protection Systems with Regard to Integrated Functional Safety and Cybersecurity Aspects," Energies, MDPI, vol. 14(8), pages 1-22, April.
    18. Kim, Hee Eun & Son, Han Seong & Kim, Jonghyun & Kang, Hyun Gook, 2017. "Systematic development of scenarios caused by cyber-attack-induced human errors in nuclear power plants," Reliability Engineering and System Safety, Elsevier, vol. 167(C), pages 290-301.
    19. Zio, E., 2018. "The future of risk assessment," Reliability Engineering and System Safety, Elsevier, vol. 177(C), pages 176-190.
    20. Yin, Zhenqin & Zhuo, Yue & Ge, Zhiqiang, 2023. "Transfer adversarial attacks across industrial intelligent systems," Reliability Engineering and System Safety, Elsevier, vol. 237(C).
    21. Bolbot, Victor & Kulkarni, Ketki & Brunou, Päivi & Banda, Osiris Valdez & Musharraf, Mashrura, 2022. "Developments and research directions in maritime cybersecurity: A systematic literature review and bibliometric analysis," International Journal of Critical Infrastructure Protection, Elsevier, vol. 39(C).
    22. Michał Syfert & Andrzej Ordys & Jan Maciej Kościelny & Paweł Wnuk & Jakub Możaryn & Krzysztof Kukiełka, 2022. "Integrated Approach to Diagnostics of Failures and Cyber-Attacks in Industrial Control Systems," Energies, MDPI, vol. 15(17), pages 1-24, August.
    23. Wang, Wei & Di Maio, Francesco & Zio, Enrico, 2020. "Considering the human operator cognitive process for the interpretation of diagnostic outcomes related to component failures and cyber security attacks," Reliability Engineering and System Safety, Elsevier, vol. 202(C).
    24. Øystein Amundrud & Terje Aven & Roger Flage, 2017. "How the definition of security risk can be made compatible with safety definitions," Journal of Risk and Reliability, , vol. 231(3), pages 286-294, June.
    25. Kazimierz T. Kosmowski & Emilian Piesik & Jan Piesik & Marcin Śliwiński, 2022. "Integrated Functional Safety and Cybersecurity Evaluation in a Framework for Business Continuity Management," Energies, MDPI, vol. 15(10), pages 1-21, May.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Georgios Kavallieratos & Sokratis Katsikas & Vasileios Gkioulos, 2020. "Cybersecurity and Safety Co-Engineering of Cyberphysical Systems—A Comprehensive Survey," Future Internet, MDPI, vol. 12(4), pages 1-17, April.
    2. Wang, Wei & Cammi, Antonio & Di Maio, Francesco & Lorenzi, Stefano & Zio, Enrico, 2018. "A Monte Carlo-based exploration framework for identifying components vulnerable to cyber threats in nuclear power plants," Reliability Engineering and System Safety, Elsevier, vol. 175(C), pages 24-37.
    3. Zio, E., 2018. "The future of risk assessment," Reliability Engineering and System Safety, Elsevier, vol. 177(C), pages 176-190.
    4. SICARD, Franck & ZAMAI, Éric & FLAUS, Jean-Marie, 2019. "An approach based on behavioral models and critical states distance notion for improving cybersecurity of industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 188(C), pages 584-603.
    5. Piètre-Cambacédès, L. & Bouissou, M., 2013. "Cross-fertilization between safety and security engineering," Reliability Engineering and System Safety, Elsevier, vol. 110(C), pages 110-126.
    6. Casson Moreno, Valeria & Marroni, Giulia & Landucci, Gabriele, 2022. "Probabilistic assessment aimed at the evaluation of escalating scenarios in process facilities combining safety and security barriers," Reliability Engineering and System Safety, Elsevier, vol. 228(C).
    7. Alanen, Jarmo & Linnosmaa, Joonas & Malm, Timo & Papakonstantinou, Nikolaos & Ahonen, Toni & Heikkilä, Eetu & Tiusanen, Risto, 2022. "Hybrid ontology for safety, security, and dependability risk assessments and Security Threat Analysis (STA) method for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 220(C).
    8. Anna E. Wolnowska & Lech Kasyk, 2021. "Identification of Threats in the Supply Chain of a Production Process," European Research Studies Journal, European Research Studies Journal, vol. 0(2B), pages 568-587.
    9. Wu, Bing & Yip, Tsz Leung & Yan, Xinping & Guedes Soares, C., 2022. "Review of techniques and challenges of human and organizational factors analysis in maritime transportation," Reliability Engineering and System Safety, Elsevier, vol. 219(C).
    10. Yang, Zhisen & Yang, Zaili & Yin, Jingbo, 2018. "Realising advanced risk-based port state control inspection using data-driven Bayesian networks," Transportation Research Part A: Policy and Practice, Elsevier, vol. 110(C), pages 38-56.
    11. Morais, Caroline & Estrada-Lugo, Hector Diego & Tolo, Silvia & Jacques, Tiago & Moura, Raphael & Beer, Michael & Patelli, Edoardo, 2022. "Robust data-driven human reliability analysis using credal networks," Reliability Engineering and System Safety, Elsevier, vol. 218(PA).
    12. Sajid, Zaman & Khan, Faisal & Zhang, Yan, 2017. "Integration of interpretive structural modelling with Bayesian network for biodiesel performance analysis," Renewable Energy, Elsevier, vol. 107(C), pages 194-203.
    13. Johansson, Jonas & Hassel, Henrik, 2010. "An approach for modelling interdependent infrastructures in the context of vulnerability analysis," Reliability Engineering and System Safety, Elsevier, vol. 95(12), pages 1335-1344.
    14. Aven, Terje, 2010. "Some reflections on uncertainty analysis and management," Reliability Engineering and System Safety, Elsevier, vol. 95(3), pages 195-201.
    15. Yan-Feng Li & Jinhua Mi & Yu Liu & Yuan-Jian Yang & Hong-Zhong Huang, 2015. "Dynamic fault tree analysis based on continuous-time Bayesian networks under fuzzy numbers," Journal of Risk and Reliability, , vol. 229(6), pages 530-541, December.
    16. Carine Dominguez-Péry & Lakshmi Narasimha Raju Vuddaraju & Isabelle Corbett-Etchevers & Rana Tassabehji, 2021. "Reducing maritime accidents in ships by tackling human error: a bibliometric review and research agenda," Journal of Shipping and Trade, Springer, vol. 6(1), pages 1-32, December.
    17. Martins, Marcelo Ramos & Maturana, Marcos Coelho, 2013. "Application of Bayesian Belief networks to the human reliability analysis of an oil tanker operation focusing on collision accidents," Reliability Engineering and System Safety, Elsevier, vol. 110(C), pages 89-109.
    18. HÃ¥vold, Jon Ivar, 2010. "Safety culture and safety management aboard tankers," Reliability Engineering and System Safety, Elsevier, vol. 95(5), pages 511-519.
    19. Evgeny Lisin & Wadim Strielkowski & Veronika Chernova & Alena Fomina, 2018. "Assessment of the Territorial Energy Security in the Context of Energy Systems Integration," Energies, MDPI, vol. 11(12), pages 1-14, November.
    20. Annika Djurle & Beth Young & Anna Berlin & Ivar Vågsholm & Anne-Lie Blomström & Jim Nygren & Anders Kvarnheden, 2022. "Addressing biohazards to food security in primary production," Food Security: The Science, Sociology and Economics of Food Production and Access to Food, Springer;The International Society for Plant Pathology, vol. 14(6), pages 1475-1497, December.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:reensy:v:139:y:2015:i:c:p:156-178. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/reliability-engineering-and-system-safety .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.