![](bg7.png)
research to create an understanding of how security
is related to configurability and which dependencies
exist between security and safety in this context.
We emphasize that SCS cannot be safe if they do
not provide techniques to ensure security which
also takes into account variable features. So, when
modeling or configuring SCS, security features and
their strategies must be as dynamic as the system fea-
tures are. Further research is strongly recommended,
e.g., analyzing relevant security requirements in
accordance to current security and safety standards.
REFERENCES
Andel, T. R., Whitehurst, L. N., and McDonald, J. T. (2014).
Software security and randomization through program
partitioning and circuit variation. In MTD. ACM.
Apel, S., Batory, D., K
¨
astner, C., and Saake, G. (2013a).
Feature-oriented software product lines. Springer.
Apel, S., Von Rhein, A., Wendler, P., Gr
¨
oßlinger, A., and
Beyer, D. (2013b). Strategies for product-line verifi-
cation: Case studies and experiments. In ICSE. IEEE.
Arrieta, A., Sagardui, G., and Etxeberria, L. (2015). Cyber-
physical systems product lines: Variability analysis
and challenges. Jornadas de Computaci
´
on Empo-
trada.
Ayala, I., Amor, M., Fuentes, L., and Troya, J. M. (2015).
A software product line process to develop agents for
the iot. Sensors, 15(7).
Barner, S., Diewald, A., Migge, J., Syed, A., Fohler,
G., Faugere, M., and P
´
erez, D. G. (2017). Dreams
toolchain: Model-driven engineering of mixed-
criticality systems. In MODELS. IEEE.
Barron, S., Cho, Y. M., Hua, A., Norcross, W., Voigt, J.,
and Haimes, Y. (2016). Systems-based cyber security
in the supply chain. In SIEDS. IEEE.
Bennaceur, A., Ghezzi, C., Tei, K., Kehrer, T., Weyns, D.,
Calinescu, R., Dustdar, S., Hu, Z., Honiden, S., and
Ishikawa, F. (2019). Modelling and analysing resilient
cyber-physical systems. In SEAMS. IEEE.
Bressan, L., de Oliveira, A. L., and Campos, F. (2020).
An approach to support variant management on safety
analysis using chess error models. In EDCC. IEEE.
Bressan, L., de Oliveira, A. L., Campos, F., and Capilla,
R. (2021). A variability modeling and transformation
approach for safety-critical systems. In VaMoS. ACM.
Burow, N., Burrow, R., Khazan, R., Shrobe, H., and Ward,
B. C. (2020). Moving target defense considerations
in real-time safety-and mission-critical systems. In
MTD. ACM.
Carpenter, T., Hatcliff, J., and Vasserman, E. Y. (2017). A
reference separation architecture for mixed-criticality
medical and iot devices. In SafeThings. ACM.
Castro, T., Teixeira, L., Alves, V., Apel, S., Cordy, M., and
Gheyi, R. (2021). A formal framework of software
product line analyses. TOSEM, 30(3).
Chumpitaz, L., Furda, A., and Loke, S. (2019). Evolving
variability requirements of iot systems. In Software
Engineering for Variability Intensive Systems. Auer-
bach Publications.
Cichos, H., Oster, S., Lochau, M., and Sch
¨
urr, A. (2011).
Model-based coverage-driven test suite generation for
software product lines. In MODELS. Springer.
Cleland-Huang, J., Gotel, O. C. Z., Huffman Hayes, J.,
M
¨
ader, P., and Zisman, A. (2014). Software trace-
ability: Trends and future directions. In ICSE.
de Oliveira, A. L., Braga, R., Masiero, P., Parker, D., Pa-
padopoulos, Y., Habli, I., and Kelly, T. (2019). Vari-
ability management in safety-critical systems design
and dependability analysis. Journal of Software: Evo-
lution and Process, 31(8).
Debbech, S., Bon, P., and Dutilleul, S. C. (2019). Con-
ceptual modelling of the dynamic goal-oriented safety
management for safety critical systems. In ICSOFT.
ACM.
Dordowsky, F., Bridges, R., and Tschope, H. (2011). Imple-
menting a software product line for a complex avion-
ics system. In SPLC. IEEE.
Ebnauf, M., Abdelmoez, W., Ammar, H. H., Hassan, A.,
and Abdelhamid, M. (2019). State-driven architecture
design for safety-critical software product lines. In
ICOM. IEEE.
Engstr
¨
om, E. and Runeson, P. (2011). Software product line
testing–a systematic mapping study. Information and
Software Technology, 53(1).
Etigowni, S., Tian, D., Hernandez, G., Zonouz, S., and But-
ler, K. (2016). Cpac: Securing critical infrastructure
with cyber-physical access control. In ACSAC. ACM.
Fægri, T. E. and Hallsteinsen, S. (2006). A software product
line reference architecture for security. In Software
Product Lines. Springer.
Fischer, S., Ramler, R., Klammer, C., and Rabiser, R.
(2021). Testing of highly configurable cyber-physical
systems–a multiple case study. In VaMoS. ACM.
Freitas, L., Scott III, W. E., and Degenaar, P. (2020).
Medicine-by-wire: Practical considerations on formal
techniques for dependable medical systems. Science
of Computer Programming, 200.
Gallina, B. and Fabre, L. (2015). Benefits of security-
informed safety-oriented process line engineering. In
DASC. IEEE.
Gannouni, W., Doumbia, M. L., and Badri, A. (2018). Sys-
tematic approach furthering confirmation measures of
safety critical automotive systems. Transactions on
The Built Environment, 174.
Geraldi, R. T., Reinehr, S., and Malucelli, A. (2020). Soft-
ware product line applied to the internet of things: A
systematic literature review. Information and Software
Technology, 124.
Ghamizi, S., Cordy, M., Papadakis, M., and Traon, Y. L.
(2020). Featurenet: Diversity-driven generation of
deep learning models. In ICSE. ACM.
Gutgarts, P. B. and Temin, A. (2010). Security-critical ver-
sus safety-critical software. In HST. IEEE.
Hammani, F. Z. (2014). Survey of non-functional require-
ments modeling and verification of software product
lines. In RCIS. IEEE.
A Systematic Mapping Study on Security in Configurable Safety-Critical Systems Based on Product-Line Concepts
223