Model-driven information flow security engineering for cyber-physical systems / Christopher Gerking ; Referees: Prof. Dr. Eric Bodden, Prof. Dr. Ralf H. Reussner. Paderborn, 2020
Inhalt
Abstract
Zusammenfassung
Danksagung
Contents
1 Introduction
1.1 Information Flow Security
1.2 Running Example
1.3 Problem Statement
1.4 Scientific Contribution
1.5 Outline
2 Foundations
2.1 Model-Driven Engineering
2.2 Model-Based Systems Engineering with Consens
2.3 Model-Driven Software Engineering with MechatronicUML
2.4 Information Flow Security
3 Specification of Security Policies in Model-Based Systems Engineering
3.1 Scientific Contributions
3.2 Quality Factors
3.3 Overview
3.4 Documentation of Policies
3.5 Validation of Refined Policies
3.6 Quality Assessment
3.7 Limitations
3.8 Related Work
3.8.1 Information Flow in Model-Driven Security Requirements Engineering
3.8.2 Security in Model-Based Systems Engineering
3.9 Summary
4 Architectural Refinement of Component-Based Security Policies
4.1 Scientific Contributions
4.2 Requirements
4.3 Overview
4.4 Component-Based Security Policies
4.5 Policy Derivation
4.6 Well-Formedness of Refinements
4.7 Composability
4.8 Limitations
4.9 Related Work
4.9.1 Security for Component Architectures of Cyber-Physical Systems
4.9.2 Information Flow Security in Component-Based Software Engineering
4.9.3 Compositional Information Flow Security for Cyber-Physical Systems
4.10 Summary
5 A Verification Technique for Real-Time Information Flow Security
5.1 Scientific Contributions
5.2 Requirements
5.3 Overview
5.4 General Verification Approach
5.5 Automata Construction
5.6 Case Study
5.7 Limitations
5.8 Related Work
5.8.1 General Verification Techniques for Information Flow Security
5.8.2 Timing-Sensitive Information Flow Security
5.9 Summary
6 Imperative Refinement of Declarative Model Transformations
6.1 Scientific Contributions
6.2 Overview
6.3 Mapping Models
6.4 Inference Engine
6.5 Execution Framework
6.6 Case Studies
6.7 Limitations
6.8 Related Work
6.9 Summary
7 Conclusion
A CoCoME Security Policies
B Implemented Execution Framework
Publications and Contributions
Bibliography