Authors:
Richard May
;
Alen Alex
;
Rakky Suresh
and
Thomas Leich
Affiliation:
Harz University of Applied Sciences, Wernigerode, Germany
Keyword(s):
security, configurable systems, product-line engineering, smart manufacturing, systematic mapping study
Abstract:
The increasing configurability of smart manufacturing software systems introduces multiple attack vectors, mainly due to their system growing complexity. Although there is an ever-increasing risk for exploiting vulnerabilities caused by configuration-related issues in this context, there is currently no overview of current state-of-research on security within smart manufacturing software systems, especially those that are based on product-line engineering. To address this gap, we employed a systematic mapping study of 43 publications related to the intersection of security, smart manufacturing, and product-line engineering (2014--2023). Besides an overview of what properties have been researched, we identified nine literature gaps to create awareness of the current state-of-research and to guide future research. Overall, we highlight that there is a need for more research on (configurable) security concepts in PLE. Current approaches often address security as a separate (non-functio
nal) requirement rather than integrating it into the PLE framework or mapping it to the unique properties of smart manufacturing. Concrete vulnerabilities, threats and risks, countermeasures and patterns are typically hardly described, which may have fatal consequences, especially in the context of configuration-related issues in cyber-physical systems.
(More)