IDEAS home Printed from https://ideas.repec.org/a/eee/reensy/v211y2021ics0951832021001745.html
   My bibliography  Save this article

A Comparative Study of STPA-Extension and the UFoI-E Method for Safety and Security Co-analysis

Author

Listed:
  • Carreras Guzman, Nelson H.
  • Zhang, Jin
  • Xie, Jing
  • Glomsrud, Jon Arne

Abstract

Emerging challenges in cyber-physical systems (CPSs) have been encouraging the development of safety and security co-analysis methods. These methods aim at mitigating the new risks associated with the convergence of safety-related systemic flaws and security-related cyber-attacks that have led to major losses in CPSs. Although several studies have reviewed existing safety and security co-analysis methods, only a few empirical studies have attempted to compare their strengths and limitations to guide risk analysis in practice. This paper bridges the gap between two novel safety and security co-analysis methods and their practical implementations. Namely, this paper compares a novel extension of the System-Theoretic Process Analysis (STPA-Extension) and the Uncontrolled Flows of Information and Energy (UFoI-E) method through a common case study. In our case study, the CPS under analysis is a conceptual autonomous ship. We conducted our comparative study as two independent teams to guarantee that the implementation of one method did not influence the other method. Furthermore, we developed a comparative framework that evaluates the relative completeness and the effort required in each analysis. Finally, we propose a tailored combination of these methods, exploiting their unique strengths to achieve more complete and cost-effective risk analysis results.

Suggested Citation

  • Carreras Guzman, Nelson H. & Zhang, Jin & Xie, Jing & Glomsrud, Jon Arne, 2021. "A Comparative Study of STPA-Extension and the UFoI-E Method for Safety and Security Co-analysis," Reliability Engineering and System Safety, Elsevier, vol. 211(C).
    • Handle: RePEc:eee:reensy:v:211:y:2021:i:c:s0951832021001745
    DOI: 10.1016/j.ress.2021.107633
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S0951832021001745
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.ress.2021.107633?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Zio, E., 2018. "The future of risk assessment," Reliability Engineering and System Safety, Elsevier, vol. 177(C), pages 176-190.
    2. Kriaa, Siwar & Pietre-Cambacedes, Ludovic & Bouissou, Marc & Halgand, Yoran, 2015. "A survey of approaches combining safety and security for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 139(C), pages 156-178.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Cheng, Tingting & Utne, Ingrid Bouwer & Wu, Bing & Wu, Qing, 2023. "A novel system-theoretic approach for human-system collaboration safety: Case studies on two degrees of autonomy for autonomous ships," Reliability Engineering and System Safety, Elsevier, vol. 237(C).
    2. Deng, Wanyi & Ma, Xiaoxue & Qiao, Weiliang, 2024. "A novel methodology to quantify the impact of safety barriers on maritime operational risk based on a probabilistic network," Reliability Engineering and System Safety, Elsevier, vol. 243(C).
    3. Alanen, Jarmo & Linnosmaa, Joonas & Malm, Timo & Papakonstantinou, Nikolaos & Ahonen, Toni & Heikkilä, Eetu & Tiusanen, Risto, 2022. "Hybrid ontology for safety, security, and dependability risk assessments and Security Threat Analysis (STA) method for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 220(C).
    4. Shiokari, Megumi & Itoh, Hiroko & Yuzui, Tomohiro & Ishimura, Eiko & Miyake, Rina & Kudo, Junichi & Kawashima, Sonoko, 2024. "Structure model-based hazard identification method for autonomous ships," Reliability Engineering and System Safety, Elsevier, vol. 247(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Alanen, Jarmo & Linnosmaa, Joonas & Malm, Timo & Papakonstantinou, Nikolaos & Ahonen, Toni & Heikkilä, Eetu & Tiusanen, Risto, 2022. "Hybrid ontology for safety, security, and dependability risk assessments and Security Threat Analysis (STA) method for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 220(C).
    2. Wei Wang & Francesco Di Maio & Enrico Zio, 2019. "Adversarial Risk Analysis to Allocate Optimal Defense Resources for Protecting Cyber–Physical Systems from Cyber Attacks," Risk Analysis, John Wiley & Sons, vol. 39(12), pages 2766-2785, December.
    3. Wang, Wei & Di Maio, Francesco & Zio, Enrico, 2020. "Considering the human operator cognitive process for the interpretation of diagnostic outcomes related to component failures and cyber security attacks," Reliability Engineering and System Safety, Elsevier, vol. 202(C).
    4. Khastgir, Siddartha & Brewerton, Simon & Thomas, John & Jennings, Paul, 2021. "Systems Approach to Creating Test Scenarios for Automated Driving Systems," Reliability Engineering and System Safety, Elsevier, vol. 215(C).
    5. Siwar Kriaa & Marc Bouissou & Youssef Laarouchi, 2019. "A new safety and security risk analysis framework for industrial control systems," Journal of Risk and Reliability, , vol. 233(2), pages 151-174, April.
    6. Wang, Wei & Cammi, Antonio & Di Maio, Francesco & Lorenzi, Stefano & Zio, Enrico, 2018. "A Monte Carlo-based exploration framework for identifying components vulnerable to cyber threats in nuclear power plants," Reliability Engineering and System Safety, Elsevier, vol. 175(C), pages 24-37.
    7. Kim, Hee Eun & Son, Han Seong & Kim, Jonghyun & Kang, Hyun Gook, 2017. "Systematic development of scenarios caused by cyber-attack-induced human errors in nuclear power plants," Reliability Engineering and System Safety, Elsevier, vol. 167(C), pages 290-301.
    8. Zio, E., 2018. "The future of risk assessment," Reliability Engineering and System Safety, Elsevier, vol. 177(C), pages 176-190.
    9. Jonek-Kowalska, Izabela & Nawrocki, Tomasz L., 2019. "Holistic fuzzy evaluation of operational risk in polish mining enterprises in a long-term and sectoral research perspective," Resources Policy, Elsevier, vol. 63(C), pages 1-1.
    10. Sima Rastayesh & Lijia Long & John Dalsgaard Sørensen & Sebastian Thöns, 2019. "Risk Assessment and Value of Action Analysis for Icing Conditions of Wind Turbines Close to Highways," Energies, MDPI, vol. 12(14), pages 1-15, July.
    11. Andrea Porcu & Stefano Sollai & Davide Marotto & Mauro Mureddu & Francesca Ferrara & Alberto Pettinau, 2019. "Techno-Economic Analysis of a Small-Scale Biomass-to-Energy BFB Gasification-Based System," Energies, MDPI, vol. 12(3), pages 1-17, February.
    12. Peng Hou & Xiaojian Yi & Haiping Dong, 2020. "A Spatial Statistic Based Risk Assessment Approach to Prioritize the Pipeline Inspection of the Pipeline Network," Energies, MDPI, vol. 13(3), pages 1-16, February.
    13. Iaiani, Matteo & Tugnoli, Alessandro & Macini, Paolo & Cozzani, Valerio, 2021. "Outage and asset damage triggered by malicious manipulation of the control system in process plants," Reliability Engineering and System Safety, Elsevier, vol. 213(C).
    14. Bolbot, Victor & Kulkarni, Ketki & Brunou, Päivi & Banda, Osiris Valdez & Musharraf, Mashrura, 2022. "Developments and research directions in maritime cybersecurity: A systematic literature review and bibliometric analysis," International Journal of Critical Infrastructure Protection, Elsevier, vol. 39(C).
    15. Cheng, Ruijun & Cheng, Yu & Chen, Dewang & Song, Haifeng, 2021. "Online quantitative safety monitoring approach for unattended train operation system considering stochastic factors," Reliability Engineering and System Safety, Elsevier, vol. 216(C).
    16. Hao, Zhaojun & Di Maio, Francesco & Zio, Enrico, 2023. "A sequential decision problem formulation and deep reinforcement learning solution of the optimization of O&M of cyber-physical energy systems (CPESs) for reliable and safe power production and supply," Reliability Engineering and System Safety, Elsevier, vol. 235(C).
    17. Read, G.J.M. & Naweed, A. & Salmon, P.M., 2019. "Complexity on the rails: A systems-based approach to understanding safety management in rail transport," Reliability Engineering and System Safety, Elsevier, vol. 188(C), pages 352-365.
    18. Wang, Wei & Cova, Gregorio & Zio, Enrico, 2022. "A clustering-based framework for searching vulnerabilities in the operation dynamics of Cyber-Physical Energy Systems," Reliability Engineering and System Safety, Elsevier, vol. 222(C).
    19. João Paulo Santos Aragão & Marcele Elisa Fontana, 2022. "Outsourcing Strategies in Public Services under Budgetary Constraints: Analysing Perceptions of Public Managers," Public Organization Review, Springer, vol. 22(1), pages 61-77, March.
    20. Natalia Lubsanova, 2021. "Regions of the zone of influence of the Great Silk Road and the Tea Road: strategic directions for the development of economic potential," Review of Applied Socio-Economic Research, Pro Global Science Association, vol. 22(2), pages 102-112, December.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:reensy:v:211:y:2021:i:c:s0951832021001745. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/reliability-engineering-and-system-safety .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.