Supporting Cybersecurity Compliance Assessment of Industrial Automation and Control System Components
Abstract
The chapter presents a case study demonstrating how security requirements of an Industrial Automation and Control System (IACS) component can be represented in a form of Protection Profile that is based on IEC 62443 standards and how compliance assessment of such component can be supported by explicitly representing a conformity argument in a form based on the OMG SACM meta-model. It is also demonstrated how an advanced argument assessment mechanism based on Dempster-Shafer belief function theory can be used to support assessors while analyzing and assessing the conformity argument related to an IACS com-ponent. These demonstrations use a NOR-STA tool for representing, managing and assessment of evidence-based arguments, which have been developed in our research group.
Authors (2)
Cite as
Full text
- Publication version
- Accepted or Published Version
- License
- Copyright (Springer International Publishing AG, part of Springer Nature 2019)
Keywords
Details
- Category:
- Monographic publication
- Type:
- rozdział, artykuł w książce - dziele zbiorowym /podręczniku w języku o zasięgu międzynarodowym
- Title of issue:
- W : Resilience of Cyber-Physical Systems, From Risk Modelling to Threat Counteraction strony 71 - 87
- Language:
- English
- Publication year:
- 2019
- Bibliographic description:
- Górski J., Wardziński A.: Supporting Cybersecurity Compliance Assessment of Industrial Automation and Control System Components// W : Resilience of Cyber-Physical Systems, From Risk Modelling to Threat Counteraction/ New York: Springer, 2019, s.71-87
- Sources of funding:
-
- Statutory activity/subsidy
- Verified by:
- Gdańsk University of Technology
seen 134 times