SRS-SafeSec:安全相关系统一体化安全建模分析方法  

SRS-SafeSec: An Integrated Modeling Approach for Safety-Related Systems

作　　者：高仪 魏强[1] 麻荣宽 耿洋洋 GAO Yi;WEI Qiang;MA Rongkuan;GENG Yangyang(Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]信息工程大学,河南郑州450001

出　　处：《信息工程大学学报》2024年第5期567-573,579,共8页Journal of Information Engineering University

摘　　要：随着工业控制系统接入互联网,安全相关系统传统的功能安全领域面临来自信息安全的威胁与挑战,然而现有的威胁建模方法对于信息安全和功能安全的融合分析不足。对安全相关系统的冗余结构进行信息安全威胁分析,确定安全相关系统的信息安全约束,提出安全相关系统的一体化威胁模型SRS-SafeSec。实验中分别使用SRS-SafeSec方法和STPA-SafeSec方法对光气反应仿真系统进行威胁建模,比较建模方法的完备性与融合性,实验结果表明SRS-SafeSec具有更好的完备性。As industrial control systems are gradually connected to the Internet,the traditional func⁃tional safety of security-related systems is facing threats and challenges from information security.However,the existing threat modeling methods lack the fusion analysis of information security and functional security is insufficient.To address this,a information security threat analysis is conducted on the redundant structure of the security related system,determining the information security con⁃straints of the security related system,and an integrated threat model of the security related system SRS-SafeSec is proposed.In the experiment,SRS-SafeSec method and STPA-SafeSec method are re⁃spectively used to model the threat of phosgene reaction simulation system,and the completeness and fusion of modeling methods are compared.The experimental results show that SRS-SafeSec has better completeness.

关 键 词：安全相关系统 功能安全 信息安全 威胁建模方法 一体化威胁建模 

分 类 号：TN915.08[电子电信—通信与信息系统]