IDEAS home Printed from https://ideas.repec.org/a/eee/reensy/v211y2021ics0951832021001745.html
   My bibliography  Save this article

A Comparative Study of STPA-Extension and the UFoI-E Method for Safety and Security Co-analysis

Author

Listed:
  • Carreras Guzman, Nelson H.
  • Zhang, Jin
  • Xie, Jing
  • Glomsrud, Jon Arne

Abstract

Emerging challenges in cyber-physical systems (CPSs) have been encouraging the development of safety and security co-analysis methods. These methods aim at mitigating the new risks associated with the convergence of safety-related systemic flaws and security-related cyber-attacks that have led to major losses in CPSs. Although several studies have reviewed existing safety and security co-analysis methods, only a few empirical studies have attempted to compare their strengths and limitations to guide risk analysis in practice. This paper bridges the gap between two novel safety and security co-analysis methods and their practical implementations. Namely, this paper compares a novel extension of the System-Theoretic Process Analysis (STPA-Extension) and the Uncontrolled Flows of Information and Energy (UFoI-E) method through a common case study. In our case study, the CPS under analysis is a conceptual autonomous ship. We conducted our comparative study as two independent teams to guarantee that the implementation of one method did not influence the other method. Furthermore, we developed a comparative framework that evaluates the relative completeness and the effort required in each analysis. Finally, we propose a tailored combination of these methods, exploiting their unique strengths to achieve more complete and cost-effective risk analysis results.

Suggested Citation

  • Carreras Guzman, Nelson H. & Zhang, Jin & Xie, Jing & Glomsrud, Jon Arne, 2021. "A Comparative Study of STPA-Extension and the UFoI-E Method for Safety and Security Co-analysis," Reliability Engineering and System Safety, Elsevier, vol. 211(C).
    • Handle: RePEc:eee:reensy:v:211:y:2021:i:c:s0951832021001745
    DOI: 10.1016/j.ress.2021.107633
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S0951832021001745
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.ress.2021.107633?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Zio, E., 2018. "The future of risk assessment," Reliability Engineering and System Safety, Elsevier, vol. 177(C), pages 176-190.
    2. Kriaa, Siwar & Pietre-Cambacedes, Ludovic & Bouissou, Marc & Halgand, Yoran, 2015. "A survey of approaches combining safety and security for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 139(C), pages 156-178.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Cheng, Tingting & Utne, Ingrid Bouwer & Wu, Bing & Wu, Qing, 2023. "A novel system-theoretic approach for human-system collaboration safety: Case studies on two degrees of autonomy for autonomous ships," Reliability Engineering and System Safety, Elsevier, vol. 237(C).
    2. Deng, Wanyi & Ma, Xiaoxue & Qiao, Weiliang, 2024. "A novel methodology to quantify the impact of safety barriers on maritime operational risk based on a probabilistic network," Reliability Engineering and System Safety, Elsevier, vol. 243(C).
    3. Alanen, Jarmo & Linnosmaa, Joonas & Malm, Timo & Papakonstantinou, Nikolaos & Ahonen, Toni & Heikkilä, Eetu & Tiusanen, Risto, 2022. "Hybrid ontology for safety, security, and dependability risk assessments and Security Threat Analysis (STA) method for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 220(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Wei Wang & Francesco Di Maio & Enrico Zio, 2019. "Adversarial Risk Analysis to Allocate Optimal Defense Resources for Protecting Cyber–Physical Systems from Cyber Attacks," Risk Analysis, John Wiley & Sons, vol. 39(12), pages 2766-2785, December.
    2. Alanen, Jarmo & Linnosmaa, Joonas & Malm, Timo & Papakonstantinou, Nikolaos & Ahonen, Toni & Heikkilä, Eetu & Tiusanen, Risto, 2022. "Hybrid ontology for safety, security, and dependability risk assessments and Security Threat Analysis (STA) method for industrial control systems," Reliability Engineering and System Safety, Elsevier, vol. 220(C).
    3. Wang, Wei & Di Maio, Francesco & Zio, Enrico, 2020. "Considering the human operator cognitive process for the interpretation of diagnostic outcomes related to component failures and cyber security attacks," Reliability Engineering and System Safety, Elsevier, vol. 202(C).
    4. Kim, Hee Eun & Son, Han Seong & Kim, Jonghyun & Kang, Hyun Gook, 2017. "Systematic development of scenarios caused by cyber-attack-induced human errors in nuclear power plants," Reliability Engineering and System Safety, Elsevier, vol. 167(C), pages 290-301.
    5. Zio, E., 2018. "The future of risk assessment," Reliability Engineering and System Safety, Elsevier, vol. 177(C), pages 176-190.
    6. Jonek-Kowalska, Izabela & Nawrocki, Tomasz L., 2019. "Holistic fuzzy evaluation of operational risk in polish mining enterprises in a long-term and sectoral research perspective," Resources Policy, Elsevier, vol. 63(C), pages 1-1.
    7. Iaiani, Matteo & Tugnoli, Alessandro & Macini, Paolo & Cozzani, Valerio, 2021. "Outage and asset damage triggered by malicious manipulation of the control system in process plants," Reliability Engineering and System Safety, Elsevier, vol. 213(C).
    8. Cheng, Ruijun & Cheng, Yu & Chen, Dewang & Song, Haifeng, 2021. "Online quantitative safety monitoring approach for unattended train operation system considering stochastic factors," Reliability Engineering and System Safety, Elsevier, vol. 216(C).
    9. Hao, Zhaojun & Di Maio, Francesco & Zio, Enrico, 2023. "A sequential decision problem formulation and deep reinforcement learning solution of the optimization of O&M of cyber-physical energy systems (CPESs) for reliable and safe power production and supply," Reliability Engineering and System Safety, Elsevier, vol. 235(C).
    10. Read, G.J.M. & Naweed, A. & Salmon, P.M., 2019. "Complexity on the rails: A systems-based approach to understanding safety management in rail transport," Reliability Engineering and System Safety, Elsevier, vol. 188(C), pages 352-365.
    11. Wang, Wei & Cova, Gregorio & Zio, Enrico, 2022. "A clustering-based framework for searching vulnerabilities in the operation dynamics of Cyber-Physical Energy Systems," Reliability Engineering and System Safety, Elsevier, vol. 222(C).
    12. Natalia Lubsanova, 2021. "Regions of the zone of influence of the Great Silk Road and the Tea Road: strategic directions for the development of economic potential," Review of Applied Socio-Economic Research, Pro Global Science Association, vol. 22(2), pages 102-112, December.
    13. Shiyu Chen & Wei Wang & Enrico Zio, 2021. "A Simulation-Based Multi-Objective Optimization Framework for the Production Planning in Energy Supply Chains," Energies, MDPI, vol. 14(9), pages 1-27, May.
    14. Feng, Jian Rui & Yu, Guanghui & Zhao, Mengke & Zhang, Jiaqing & Lu, Shouxiang, 2022. "Dynamic risk assessment framework for industrial systems based on accidents chain theory: The case study of fire and explosion risk of UHV converter transformer," Reliability Engineering and System Safety, Elsevier, vol. 228(C).
    15. Kazimierz T. Kosmowski & Emilian Piesik & Jan Piesik & Marcin Śliwiński, 2022. "Integrated Functional Safety and Cybersecurity Evaluation in a Framework for Business Continuity Management," Energies, MDPI, vol. 15(10), pages 1-21, May.
    16. Moradi, Ramin & Cofre-Martel, Sergio & Lopez Droguett, Enrique & Modarres, Mohammad & Groth, Katrina M., 2022. "Integration of deep learning and Bayesian networks for condition and operation risk monitoring of complex engineering systems," Reliability Engineering and System Safety, Elsevier, vol. 222(C).
    17. Terje Aven, 2019. "The Call for a Shift from Risk to Resilience: What Does it Mean?," Risk Analysis, John Wiley & Sons, vol. 39(6), pages 1196-1203, June.
    18. Victor Bolbot & Gerasimos Theotokatos & LA Wennersberg & Jerome Faivre & Dracos Vassalos & Evangelos Boulougouris & Ørnulf Jan Rødseth & Pål Andersen & Ann-Sofie Pauwelyn & Antoon Van Coillie, 2023. "A novel risk assessment process: Application to an autonomous inland waterways ship," Journal of Risk and Reliability, , vol. 237(2), pages 436-458, April.
    19. Peter Blokland & Genserik Reniers, 2019. "An Ontological and Semantic Foundation for Safety and Security Science," Sustainability, MDPI, vol. 11(21), pages 1-25, October.
    20. Georgios Kavallieratos & Sokratis Katsikas & Vasileios Gkioulos, 2020. "Cybersecurity and Safety Co-Engineering of Cyberphysical Systems—A Comprehensive Survey," Future Internet, MDPI, vol. 12(4), pages 1-17, April.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:reensy:v:211:y:2021:i:c:s0951832021001745. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/reliability-engineering-and-system-safety .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.