Home > Research > Publications & Outputs > Security Requirements Engineering in Safety-Cri...


Text available via DOI:

View graph of relations

Security Requirements Engineering in Safety-Critical Railway Signalling Networks.

Research output: Contribution to journalJournal article

  • Markus Heinrich
  • Tsvetoslava Vateva-Gurova
  • Tolga Arul
  • Stefan Katzenbeisser
  • Neeraj Suri
  • Henk Birkholz
  • Andreas Fuchs
  • Christoph Krauß
  • Maria Zhdanova
  • Don Kuzhiyelil
  • Sergey Tverdyshev
  • Christian Schlehuber
Article number8348925
<mark>Journal publication date</mark>14/07/2019
<mark>Journal</mark>Security and Communication Networks
Number of pages14
Publication StatusPublished
<mark>Original language</mark>English


Securing a safety-critical system is a challenging task, because safety requirements have to be considered alongside security controls. We report on our experience to develop a security architecture for railway signalling systems starting from the bare safety-critical system that requires protection. We use a threat-based approach to determine security risk acceptance criteria and derive security requirements. We discuss the executed process and make suggestions for improvements. Based on the security requirements, we develop a security architecture. The architecture is based on a hardware platform that provides the resources required for safety as well as security applications and is able to run these applications of mixed-criticality (safety-critical applications and other applications run on the same device). To achieve this, we apply the MILS approach, a separation-based high-assurance security architecture to simplify the safety case and security case of our approach. We describe the assurance requirements of the separation kernel subcomponent, which represents the key component of the MILS architecture. We further discuss the security measures of our architecture that are included to protect the safety-critical application from cyberattacks.