[SystemSafety] [EC 61508 and cybersecurity

[Peter Bernard Ladkin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 2015-06-01 13:06 , RICQUE Bertrand (SAGEM DEFENSE SECURITE) wrote:
> Safety is a roughly 2D problem ( probability x consequence), the two dimensions being usually
> stable along the unique system timescale.
> 
> Security is a 3D problem with sub dimensions

The analysis of what the consequences are and how they happen is very similar for both safety and
security. Something happens to your system that cause it to do what you do not want. That
"something" can be happenstance, or it can be deliberate. But the consequences are determined
exactly the same way by the system properties in both cases. For analytical purposes, for security
incidents you turn some of the possible events into quasi-Booleans (turning happenstance into
intention) and formally propagate through the Causal Fault Graph.

PBL

Prof. Peter Bernard Ladkin, Faculty of Technology, University of Bielefeld, 33594 Bielefeld, Germany
Je suis Charlie
Tel+msg +49 (0)521 880 7319  www.rvs.uni-bielefeld.de




-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJVbD8TAAoJEIZIHiXiz9k+5loIAJBiN25aTEdJ+oJNzfVdak24
k9UdknrSC6adF2fkpKGx6qUgv9XnyPusgjVuLs/5POpbjP/fRtWifZgCOAnseoqB
hM5PhJYnP1qU1XmFmLGa0nXWNE5ydZwhOkcie9AW91Yt6B5AWpo4VKX+3pd156Gy
OPDW+4x6jiPd5/8aWjjfyUxpAUrVpEiiRtbP5078LSwioL8DfO+FioepZZ4/b6d1
WysBhE/L9Q/mmx/ccislS8ljt2t7rPTv2ID34qpTCzAd9WgPc52s/6RTHHevGCB6
WQ45MkqpII4jLkHIY5YECxMhn+11tFaN1fOkvOfdDrMsEPiU98A+W81Aah0X454=
=2eCZ
-----END PGP SIGNATURE-----