Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems
We introduce SysML-Sec, a SysML-based Model-Driven Engineering environment aimed at fostering the collaboration between system designers and security experts at all methodological stages of the development of an embedded system. A central issue in the design of an embedded system is the definition o...
| Main Authors: | , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Open Publishing Association
2014-04-01
|
| Series: | Electronic Proceedings in Theoretical Computer Science |
| Online Access: | http://arxiv.org/pdf/1404.1985v1 |
| _version_ | 1818968858396983296 |
|---|---|
| author | Ludovic Apvrille Yves Roudier |
| author_facet | Ludovic Apvrille Yves Roudier |
| author_sort | Ludovic Apvrille |
| collection | DOAJ |
| description | We introduce SysML-Sec, a SysML-based Model-Driven Engineering environment aimed at fostering the collaboration between system designers and security experts at all methodological stages of the development of an embedded system. A central issue in the design of an embedded system is the definition of the hardware/software partitioning of the architecture of the system, which should take place as early as possible. SysML-Sec aims to extend the relevance of this analysis through the integration of security requirements and threats. In particular, we propose an agile methodology whose aim is to assess early on the impact of the security requirements and of the security mechanisms designed to satisfy them over the safety of the system. Security concerns are captured in a component-centric manner through existing SysML diagrams with only minimal extensions. After the requirements captured are derived into security and cryptographic mechanisms, security properties can be formally verified over this design. To perform the latter, model transformation techniques are implemented in the SysML-Sec toolchain in order to derive a ProVerif specification from the SysML models. An automotive firmware flashing procedure serves as a guiding example throughout our presentation. |
| first_indexed | 2024-12-20T14:11:22Z |
| format | Article |
| id | doaj.art-abf235ab4c884aa3af0e0663d8d18109 |
| institution | Directory Open Access Journal |
| issn | 2075-2180 |
| language | English |
| last_indexed | 2024-12-20T14:11:22Z |
| publishDate | 2014-04-01 |
| publisher | Open Publishing Association |
| record_format | Article |
| series | Electronic Proceedings in Theoretical Computer Science |
| spelling | doaj.art-abf235ab4c884aa3af0e0663d8d181092022-12-21T19:38:08ZengOpen Publishing AssociationElectronic Proceedings in Theoretical Computer Science2075-21802014-04-01148Proc. GraMSec 2014153010.4204/EPTCS.148.2:11Towards the Model-Driven Engineering of Secure yet Safe Embedded SystemsLudovic Apvrille0Yves Roudier1 Institut Mines-Telecom, Telecom ParisTech, CNRS LTCI EURECOM We introduce SysML-Sec, a SysML-based Model-Driven Engineering environment aimed at fostering the collaboration between system designers and security experts at all methodological stages of the development of an embedded system. A central issue in the design of an embedded system is the definition of the hardware/software partitioning of the architecture of the system, which should take place as early as possible. SysML-Sec aims to extend the relevance of this analysis through the integration of security requirements and threats. In particular, we propose an agile methodology whose aim is to assess early on the impact of the security requirements and of the security mechanisms designed to satisfy them over the safety of the system. Security concerns are captured in a component-centric manner through existing SysML diagrams with only minimal extensions. After the requirements captured are derived into security and cryptographic mechanisms, security properties can be formally verified over this design. To perform the latter, model transformation techniques are implemented in the SysML-Sec toolchain in order to derive a ProVerif specification from the SysML models. An automotive firmware flashing procedure serves as a guiding example throughout our presentation.http://arxiv.org/pdf/1404.1985v1 |
| spellingShingle | Ludovic Apvrille Yves Roudier Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems Electronic Proceedings in Theoretical Computer Science |
| title | Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems |
| title_full | Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems |
| title_fullStr | Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems |
| title_full_unstemmed | Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems |
| title_short | Towards the Model-Driven Engineering of Secure yet Safe Embedded Systems |
| title_sort | towards the model driven engineering of secure yet safe embedded systems |
| url | http://arxiv.org/pdf/1404.1985v1 |
| work_keys_str_mv | AT ludovicapvrille towardsthemodeldrivenengineeringofsecureyetsafeembeddedsystems AT yvesroudier towardsthemodeldrivenengineeringofsecureyetsafeembeddedsystems |