Authors:
Loris Dal Lago
;
Fabio Federici
;
Davide Martintoni
and
Valerio Senni
Affiliation:
Applied Research and Technology, Collins Aerospace, Piazza dell’Indipendenza 23, 00185 Rome, Italy
Keyword(s):
Risk Assessment, Information-flow Security, Model-based Design, Industrial Manufacturing Security.
Abstract:
Modern manufacturing infrastructures leverage internet and intranet connectivity to guarantee the remote execution of services at the shopfloor level, continued operations and remote reconfigurability. Nonetheless, equipment used in industrial plants is not always prepared to withstand the security challenges introduced by increased connectivity demands, thus exposing the overall system to security threats. We propose a model-based approach to combine secure design of digital infrastructures for manufacturing with a rigorous security risk assessment, enabling trusted connectivity for equipment, with a robust analysis method for the evaluation of their security properties. To that aim, information flow paths are captured between functions and equipment, assets and threats are identified, mitigations and new security requirements are defined. Mitigations are then propagated to the level of implementation, where we rely on hardware-enforced isolation to provide trusted computation and d
ata protection. In this paper we demonstrate our methodological approach using an extension of the SysML language for threat modelling and by relying on ARM TrustZone for hardware isolation. Our approach is sufficiently general to be reused for other domains and alternative technologies.
(More)