Published January 20, 2015 | Version v1
Conference paper Open

Security-Informed Safety Case Approach to Analysing MILS Systems

  • 1. City University London
  • 2. Airbus Group Innovations
  • 3. Thales Austria GmbH


Safety cases are the development foundation for safety-critical systems and are often quite complex to understand depending on the size of the system and operational conditions. The recent advent of security aspects complicates the issues further. This paper describes an approach to analysing safety and security in a structured way and creating security-informed safety cases that provide justification of safety taking into particular consideration the impact of security. The paper includes an overview of the structured assurance case concept, a security-informed safety methodology and a layered approach to constructing cases. The approach is applied to a Security Gateway that is used to control data flow between security domains in a separation kernel based operating system in avionics environment. We show that a clear and structured way of presenting a safety case combining safety and security alleviates understanding important interactions taking into account the impact and, hence, increases safety.



Files (430.4 kB)

Name Size Download all
430.4 kB Preview Download