Security-related design patterns for intelligent sensors requiring measurable assurance

• Autorzy: Bialas A.

Warianty tytułu

PL

Specyfikacja bezpieczeństwa dla czujnika ruchu tachografu cyfrowego

• Języki publikacji: EN

Abstrakty

EN

The paper deals with the IT security development process concerning intelligent electronic devices. When they are used for high risk applications, they require measurable assurance that can be provided by the Common Criteria methodology. On the motion sensor of a digital tachograph example, the complete security specification was elaborated. Additionally, thanks to the author's applied method, these specification items can be easily reused for a broader class of devices. This way security-related design patterns for intelligent sensors were elaborated.

PL

Artykuł dotyczy procesu konstruowania zabezpieczeń informatycznych w odniesieniu do inteligentnych urządzeń elektronicznych. Ich stosowanie w systemach obarczonych wysokim ryzykiem wymaga, by cechowały się one mierzalnym, uzasadnionym zaufaniem (wiarygodnością), które może zapewnić metodyka Common Criteria. Wypracowano kompletną specyfikację bezpieczeństwa dla czujnika ruchu tachografu cyfrowego. Dzięki autorskiej metodzie jej elementy mają charakter wzorców projektowych do opracowania szerszej grupy podobnych urządzeń (czujników)

Słowa kluczowe

EN

IT security; motion sensor; design pattern

PL

zabezpieczenia informatyczne; czujnik ruchu; wzorzec projektowy

• Wydawca: Wydawnictwo SIGMA-NOT
• Czasopismo: Przegląd Elektrotechniczny
• Rocznik: 2009
• Tom: R. 85, nr 7
• Strony: 92--99
• Opis fizyczny: Bibliogr. 20 poz., rys., schem.

Twórcy

autor

Bialas A.

• Research and Development Centre for Electrical Engineering and Automation in Mining EMAG, Leopolda 31, 40-189 Katowice,

Bibliografia

• [1] IEC 61508 Functional safety of electrical /electronic /programmable electronic safety-related systems
• [2] ISO/IEC 15408 Common Criteria for IT security evaluation
• [3] Common Criteria portal, http://www.commoncriteriaportal.org/
• [4] Improving Automotive Security by Evaluation – From Security Health Check to Common Criteria (2004), http://www.src-gmbh.de/whitepapers/automotive_security_amendola.pdf
• [5] Commission Regulation (EC) No.1360/2002 on recording equipment in road transport, Annex 1B Requirements for Construction, Testing, Installation and Inspection, Official Journal of the European Communities, L 207, Commission of the European Communities, (2002), pp. 204-252
• [6] ISO/IEC 16844-3 Road Vehicles – Tachograph systems, Part 3: Motion sensor interface
• [7] Furgel I., Lemke K., A Review of the Digital Tachograph System, In: Embedded Security in Cars, Springer Berlin Heidelberg (2006), pp. 69-94
• [8] Eriksson M., Konsult I., How to develop secure IT products using Common Criteria, Engineering Management Conference, (2006), IEEE International, pp. 297-299
• [9] Paar Ch., Weimerskirch A., Embedded security in a pervasive world, Information Security Technical Report, vol. 12 (2007), Issue 3, pp. 155-161
• [10] Security Target IS2000 Smartach SRES, P206412, (2005), Actia, Toulouse
• [11] Security Target EFAS-3 V01 Digital Tachograph device, (2008), EFKONmobility GmbH
• [12] Bialas A., Semiformal framework for ICT security development, The 8th International Common Criteria Conference, (2007), Rome, http://www.8iccc.com/index.php
• [13] Bialas A., Semiformal Approach to the IT Security Development, In: Zamojski W., Mazurkiewicz J., Sugier J., Walkowiak T., Proc. of the Int. Conf. on Dependability of Comp. Sys. DepCoS-RELCOMEX, IEEE Comp. Society (2007), Los Alamitos, Washington, Tokyo, ISBN 0-7695-2850-3, pp. 3-11
• [14] Bialas A., A language for the security issues specification during IT security development process, Theoretical and Applied Informatics, 20 (2008), No.2, pp. 125-145
• [15] Bialas A.: Semiformal Common Criteria Compliant IT Security Development Framework, Studia Informatica, vol. 29 (2008) Number 2B(77), Silesian Univ. of Technology Press, Gliwice, www.znsi.aei.polsl.pl/
• [16] Bialas A.: Ontology-based Approach to the Common Criteria Compliant IT Security Development, In: Proceedings of the 2008 Int. Conf. on Security and Management – SAM'08, Las Vegas, (2008), pp. 586-592
• [17] Bialas A.: Ontology-based Security Problem Definition and Solution for the Common Criteria Compliant Development Process, Proc. of the Int. Conf. on Dependability of Comp. Sys. DepCoS-RELCOMEX 2009, IEEE Comp. Society (accepted)
• [18] http://www.emag.pl/
• [19] Pławniak-Mowna A., Krawczyk A., Duraj A., Electromagnetic Field and Home Monitoring In Cardiac Device Technology, Przegląd Elektrotechniczny, 84 (2008), nr 12, 224-226
• [20] Maśnicki R., Implementacja sieci M2M w przyrządzie wirtualnym, Przegląd Elektrotechniczny, 84 (2008), nr 12, 308-311