Security-Informed Safety "If it's not secure, it's not safe"

Robin Bloomfield (1) , Robert Stroud (2)

1 Centre for Software Reliability
2 Adelard LLP

Traditionally, safety and security have been treated as separate disciplines, but this position is increasingly becoming untenable and stakeholders are beginning to argue that if it's not secure, it's not safe. The idea of combining safety and security is not new but neither is it straightforward. To illustrate the complexities of the problem, we explore some of the challenges that need to be overcome in order to develop a principled approach to "security-informed safety".

Mots clés: security-informed safety; assurance cases

Domaines: Systèmes embarqués

Robin Bloomfield, Robert Stroud. Security-Informed Safety "If it's not secure, it's not safe". Safecomp 2013 FastAbstract, Sep 2013, Toulouse, France. pp.NC. ⟨hal-00926459⟩