Procedure based functional safety and information security management of industrial automation and control systems on example of the oil port installations

• Autorzy: Śliwiński M. , Piesik E.
• Języki publikacji: EN

Abstrakty

EN

The approach addresses selected technical and organization aspects of risk mitigation in the oil port installations with regard to functional safety and security requirements specified in standards IEC 61508, IEC 61511 and IEC 62443. The procedure for functional safety management includes the hazard identification, risk analysis and assessment, specification of overall safety requirements and definition of safety functions. Based on the risk evaluation results the safety integrity level (SIL) and security assurance level (SAL) will be determined for consecutive safety functions. The proposed approach will be composed of the following items: process and procedure based safety and security management, example of procedure based safety management including insurance, integrated safety and security assessment of industrial control system (ICS) of the oil port pipelines, tanks and critical infrastructure.

Słowa kluczowe

EN

functional safety; security; cyber HAZOP; industrial control systems; oil port installations

• Wydawca: Polskie Towarzystwo Bezpieczeństwa i Niezawodności
• Czasopismo: Journal of Polish Safety and Reliability Association
• Rocznik: 2017
• Tom: Vol. 8, No. 1
• Strony: 129--138
• Opis fizyczny: Bibliogr. 17 poz., rys., tab.

Twórcy

autor

Śliwiński M.

• Gdańsk University of Technology , Gdansk, Poland

autor

Piesik E.

• Gdańsk University of Technology , Gdansk, Poland

Bibliografia

• [1] Barnert, T., Kosmowski, K.T. & Śliwiński, M. (2010). Integrated functional safety and security analysis of process control and protection systems with regard to uncertainty issues. Proceedings of PSAM 10, Seattle.
• [2] Barnert, T., Kosmowski, K.T. & Śliwiński, M. (2010). A method for including the security aspects in the functional safety analysis of distributed control and protection systems. ESREL, Rhodes, Greece.
• [3] Barnert, T. & Śliwiński, M. (2013). Functional safety and information security in the critical infrastructure objects and systems (in Polish), Modern communication and data transfer systems for safety and security. Wolters Kluwer, 476-507.
• [4] Goble, W. & Cheddie, H. (2005). Safety instrumented systems verification: Practical probabilistic calculations. ISA.
• [5] Goslin, Ch. (2008). Maritime and port security. Duos Technologies, Inc., Jacksonville.
• [6] Grøtan, T.O., Jaatun, M.G., Øien, K. & Onshus, T. (2007). The SeSa Method for Assesing Secure Remote Access to Safety Instrumented Systems (SINTEF A1626). Trondheim, Norway.
• [7] Hildebrandt, P. (2000). Critical aspects of safety, availability and communication in the control of a subsea gas pipeline, Requirements and Solutions HIMA.
• [8] IEC 61508 (2010). Functional Safety of Electrical/Electronic/Programmable Electronic Safety-Related Systems, Parts 1-7. International Electrotechnical Commission, Geneva.
• [9] IEC 61511 (2015). Functional safety: Safety Instrumented Systems for the Process Industry Sector. Parts 1-3. International Electrotechnical Commission, Geneva.
• [10] IEC 62443 (2013). Security for industrial automation and control systems. Parts 1-13 (undergoing development). International Electrotechnical Commission, Geneva.
• [11] ISO/IEC 15408 (1999). Information technology Security techniques – Evaluation criteria for IT security. Part 1-3. International Electrotechnical Commission, Geneva.
• [12] ISO 31000 (2009). Risk management - Principles and guidelines. International Organization for Standardization, Geneva.
• [13] Kosmowski, K.T., Śliwiński, M. & Barnert, T. (2006). Functional safety and security assessment of the control and protection systems. Proc. European Safety & Reliability Conference - ESREL, Estoril. Taylor & Francis Group, London.
• [14] Missala, T. (2010). Book of procedures for functional safety compliance evaluation of protection systems in the process industry. Report no. 8795, PIAP, Warsaw.
• [15] Schneider Electric (2014): Pipeline Management Solution An Integrated Solution for Pipeline Operators.
• [16] SESAMO (2014). Integrated Design and Evaluation Methodology. Security and Safety modelling. Artemis JU Grant Agr. no. 2295354.
• [17] Śliwiński, M., Kosmowski, K.T. & Piesik, E. (2015). Verification of the safety integrity levels with regard of information security issues (in Polish), In: Advanced Systems for Automation and Diagnostics, PWNT, Gdańsk.

Uwagi

Opracowanie ze środków MNiSW w ramach umowy 812/P-DUN/2016 na działalność upowszechniającą naukę (zadania 2017).