Integrated approach for functional safety and cyber security management in maritime critical infrastructures

• Autorzy: Śliwiwński Marcin , Piesik Emilian
• Języki publikacji: EN

Abstrakty

EN

The work is devoted important issues of the management in maritime critical infrastructure of functional safety analysis, in particular the safety integrity level (SIL) verification of safety functions to be implemented within the distributed control and protection systems with regard to cyber security aspects. A method based on quantitative and qualitative information is proposed for the SIL (IEC 61508, 61511) verification with regard of the evaluation assurance levels (EAL) (ISO/IEC 15408), the security assurance levels (SAL) (IEC 62443), and the number of protection rings described in the Secure Safety (SeSa-SINTEF) methodology. The proposed approach will be composed of the following items: process and procedure based safety and cyber security management, integrated safety and security assessment of industrial control system (ICS) of the maritime critical infrastructure. Proposed methodology is illustrated on case study that based on the part of installation critical maritime infrastructure.

Słowa kluczowe

EN

maritime infrastructure; functional safety; cyber security; SIL; SAL; EAL; industrial control systems

• Wydawca: Polskie Towarzystwo Bezpieczeństwa i Niezawodności
• Czasopismo: Journal of Polish Safety and Reliability Association
• Rocznik: 2019
• Tom: Vol. 10, No. 1
• Strony: 137--148
• Opis fizyczny: Bibliogr. 23 poz., rys., tab., wykr.

Twórcy

autor

Śliwiwński Marcin

• Gdańsk University of Technology , Gdansk, Poland

autor

Piesik Emilian

• Gdańsk University of Technology , Gdansk, Poland

Bibliografia

• [1] Barnert, T., Kosmowski, K.T., Śliwiński, M. (2010). Integrated functional safety and security analysis of process control and protection systems with regard to uncertainty issues. Proceedings of PSAM 2010, Seattle.
• [2] Barnert, T., Śliwiński, M. (2013). Functional safety and information security in the critical infrastructure objects and systems (in Polish), Modern communication and data transfer systems for safety and security. Wolters Kluwer, 476-507.
• [3] Barnert, T., Kosmowski, K.T., Piesik, E., Śliwiński, M. (2014). Security aspects in functional safety analysis. Journal of Polish Safety and Reliability Association, Summer Safety and Reliability Seminars, Volume 5, Number 1.
• [4] Goble, W., Cheddie, H. (2005). Safety instrumented systems verification: Practical probabilistic calculations. ISA.
• [5] Grøtan, T.O., Jaatun, M.G., Øien, K., Onshus, T. (2007). The SeSa Method for Assessing Secure Remote Access to Safety Instrumented Systems (SINTEF A1626). Trondheim, Norway.
• [6] Hildebrandt, P. (2000). Critical aspects of safety, availability and communication in the control of a subsea gas pipeline, Requirements and Solutions HIMA.
• [7] Hokstad, P. (2004). A generalisation of the beta factor model, Proceedings of the European Safety & Reliability Conference, Berlin.
• [8] Hoyland, A., Rausand, M. (2004). System Reliability Theory. Models and Statistical Methods, Second Edition, John Wiley & Sons, Inc, New York.
• [9] IEC 61508. (2010). Functional Safety of Electrical/Electronic/Programmable Electronic Safety-Related Systems, Parts 1-7. International Electrotechnical Commission, Geneva.
• [10] IEC 61511. (2015). Functional safety: Safety Instrumented Systems for the Process Industry Sector. Parts 1-3, International Electrotechnical Commission, Geneva.
• [11] IEC 62443. (2013). Security for industrial automation and control systems. Parts 1-13, International Electrotechnical Commission, Geneva.
• [12] ISO/IEC 15408. (1999). Information technology Security techniques – Evaluation criteria for IT security. Part 1-3. International Electrotechnical Commission, Geneva.
• [13] Kosmowski, K.T. (2013). Functional safety and reliability analysis methodology for hazardous industrial plants. Gdansk University of Technology Publishers.
• [14] Kosmowski, K.T., Śliwiński, M., Barnert, T. (2006). Functional safety and security assessment of the control and protection systems, Proc. European Safety & Reliability Conference – ESREL, Taylor & Francis Group, London.
• [15] Kosmowski, K.T., Śliwiński, M., Piesik, E., Gołębiewski, D. (2016). Procedure based proactive functional safety management for the risk mitigation of hazardous events in the oil port installations including insurance aspects. Journal of Polish Safety and Reliability Association. Summer Safety and Reliability Seminars.
• [16] NIH. (2002). Security Level Designation, National Institutes of Health.
• [17] Piesik, E., Śliwiński, M., Barnert, T. (2016). Determining and verifying the safety integrity level of the safety instrumented systems with the uncertainty and security aspects, Reliability Engineering & System Safety, 152, 259-272.
• [18] SESAMO. (2014). Integrated Design and Evaluation Methodology. Security and Safety modelling. Artemis JU Grant Agr. no. 2295354.
• [19] SINTEF. (2010). Reliability Data for Safety Instrumented Systems - PDS Data Handbook. SINTEF 2010 edition.
• [20] Śliwiński, M. (2006). Methods of risk analysis based on functional safety aspects for the control and protection systems. GUT, Gdańsk.
• [21] Śliwiński, M., Kosmowski, K.T., Piesik, E. (2015). Verification of the safety integrity levels with regard of information security issues (in Polish), In: Advanced Systems for Automation and Diagnostics, PWNT, Gdańsk.
• [22] Śliwiński, M., Piesik, E. (2017). Procedure based functional safety and information security management of industrial automation and control systems on example of the oil port installations, Journal of Polish Safety and Reliability Association. Summer Safety and Reliability Seminars.
• [23] Śliwiński, M., Piesik, E. (2018). Functional safety with cyber security for the control and protection systems on example of the oil port infrastructure, Journal of Polish Safety and Reliability Association. Summer Safety and Reliability Seminars.

Uwagi

Opracowanie rekordu w ramach umowy 509/P-DUN/2018 ze środków MNiSW przeznaczonych na działalność upowszechniającą naukę (2019).