Skip to main content

Framework for Design Exploration of Secure Embedded System Development

  • Conference paper
  • First Online:
Book cover Systems Engineering in Context

Abstract

As development and implementation of the Internet of Things (IoT) and embedded systems technologies increase, there is the need for a design framework that allows for thorough exploration of potential designs while detecting any potential risks and security violations. Without verification and validation, assuring that system security requirements are properly enforced becomes as tedious as it is hazardous. Our work proposes the use of a novel security development framework for exploration of secure embedded system designs. In this manner we are able to ensure that security functional and architectural requirements are maintained without the introduction of additional risk factors.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 169.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Hardcover Book
USD 219.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Jürjens, J. (2005). Secure systems development with UML. Berlin: Springer Science & Business Media.

    MATH  Google Scholar 

  2. SysML Sec. http://sysml-sec.telecom-paristech.fr

  3. Jürjens, J. (2002). UMLsec: Extending UML for secure systems development, UML 2002 the unified modeling language (pp. 412–425). Berlin: Springer Publishing.

    Book  Google Scholar 

  4. Sadeghi, A., Visconti, I., & Wachsmann, C. (2009). Anonymizer-enabled security and privacy for RFID. In International Conference on Cryptology and Network Security (pp. 134–153). Berlin: Springer.

    Chapter  Google Scholar 

  5. Abidin, A., Matsuura, K., & Mitrokotsa, A. (2014). Security of a privacy-preserving biometric authentication protocol revisited. In International Conference on Cryptology and Network Security (pp. 290–304). Cham: Springer.

    Chapter  Google Scholar 

  6. Dong, C., & Kiefer, F. (2015). Secure set-based policy checking and its application to password registration. In International Conference on Cryptology and Network Security (pp. 59–74). Cham: Springer.

    Chapter  Google Scholar 

  7. Sangiovanni-Vincentelli, A. (2007). Quo Vadis, SLD? Reasoning about the trends and challenges of system level design. Proceedings of the IEEE, 95(3), 467–506.

    Article  Google Scholar 

  8. AADL. http://www.aadl.info/aadl/currentsite

  9. Feiler, P. (2010). SAE AADL V2: An overview. Pittsburgh: Carnegie Mellon University.

    Google Scholar 

  10. AADL Tools. https://wiki.sei.cmu.edu/aadl/index.php/AADL\tools

  11. Ellison, R., Householder, A., Hudak, J., Kazman, R., & Woody, C. (2015). Extending AADL for security design assurance of cyber-physical systems. Pittsburgh: Software Engineering Institute, Carnegie Mellon University CMU/SEI-2015-TR-014.

    Google Scholar 

  12. Delange, J., Feiler, P., Klieber, W., Nam, M., & Seibel, J. AADL security annex. https://github.com/saeaadl/userdays/blob/master/UserDays/May2016/security-annex-May2016.pdf

  13. Delange, J., Nam, M., & Seibel, J. AADL security analysis tools. https://github.com/saeaadl/userdays/blob/master/UserDays/May2016/security-analysis-May2016.pdf

  14. Feiler, P. Automated assurance of security-policy enforcement in critical systems. https://insights.sei.cmu.edu/seiblog/2018/02/automated-assurance-of-security-policy-enforcement-in-critical-systems.html

  15. AASPE AADL Github. https://github.com/cmu-sei/AASPE

  16. Ferrante, A., Milosevic, J., & Janjusévić, M. (2013). A security-enhanced design methodology for embedded systems. In International Conference on Security and Cryptography (SECRYPT).

    Google Scholar 

  17. Alisa User Guide. https://rawgit.com/osate/alisa/develop/org.osate.alisa.help/contents/00-Main.html

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Paul A. Wortman .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Wortman, P.A., Chandy, J.A. (2019). Framework for Design Exploration of Secure Embedded System Development. In: Adams, S., Beling, P., Lambert, J., Scherer, W., Fleming, C. (eds) Systems Engineering in Context. Springer, Cham. https://doi.org/10.1007/978-3-030-00114-8_39

Download citation

Publish with us

Policies and ethics