Authors:
Markus Fockel
1
;
David Schubert
1
;
Roman Trentinaglia
1
;
Hannes Schulz
2
and
Wolfgang Kirmair
2
Affiliations:
1
Software Engineering & IT Security, Fraunhofer IEM, Paderborn, Germany
;
2
BMW Group, Munich, Germany
Keyword(s):
Safety and Security by Design, Modal Sequence Diagrams, Fault Tree Analysis.
Abstract:
There is a steady trend towards increasing the connectivity of vehicles – especially for realizing automated driving functions. This also increases the attack surface, which is crucial due to the safety-criticality of vehicles. Hence, engineering methods are required, that account for both security and safety, and identify conflicts and synergies. However, in the automotive domain, newly introduced security analysis methods meet well- established safety analysis methods. Both are applied in separate silos which hinders communication and increases development effort. In this paper, we introduce an integrated safety and security analysis method that supports the analysis of correlations between attacks and hazards on an architectural level. It integrates with an existing model-based requirements engineering method, and automates modeling and analysis steps to foster regular communication with low effort in early development phases. We evaluated the approach in a case study with an auto
mated driving function.
(More)