certMILS
Published October 13, 2021 | Version v1
Preprint Open

Security Certification of Cyber Physical Systems for Critical Infrastructure based on the Compositional MILS Architecture

Creators

  • 1. atsec information security GmbH
  • 2. DEKRA
  • 3. Elektrotechnický zkušební ústav s.p. (EZU)
  • 4. Q-Media s.r.o.
  • 5. Schneider Electric
  • 6. SYSGO GmbH
  • 7. SYSGO SAS
  • 8. SYSGO s.r.o.
  • 9. Technikon
  • 10. Thales Austria
  • 11. Universität Rostock

Description

We describe compositional architectures and certifications in the research project certMILS. Compositional architectures enable re-use of certified COTS (commercial off-the-shelf) components with a well-defined delegation of responsibilities between component developers and system integrators during cyber physical system design and certification. We show how we used a Common Criteria certified MILS (Multiple Independent Levels of Safety / Security) platform for compositional designs and IEC 62443-4-1/62443-4-2 security evaluations and certifications for composed systems from the domains of smart grid, railway, and subway, that are safety- and security-critical.

Files

Compositional-architectures-and-certifications-in-certMILS-IECON.pdf

Files (419.6 kB)

Additional details

Funding

certMILS – Compositional security certification for medium- to high-assurance COTS-based systems in environments with emerging threats 731456
European Commission