论文标题
STPA驱动的多级运行时监视以及时危害检测
STPA-driven Multilevel Runtime Monitoring for In-time Hazard Detection
论文作者
论文摘要
运行时验证或运行时监视设备安全至关重要的网络物理系统，以增强设计保证措施并确保运营安全和保障。网络物理系统具有相互作用故障，攻击表面和攻击向量，导致意外危害和损失方案。这些相互作用的故障对监视规范和监视危险检测的监视规格和监视位置提出了挑战。我们开发了一个合理的工作流模型，该模型将系统理论过程分析连接起来，通常称为STPA，危害因果信息到较低级别的运行时监视以检测操作阶段的危害。具体而言，我们的模型遵循DepDevops范式，提供证据和见解，以监视监视的内容，在哪里监视和监视环境。我们通过在自主紧急制动系统模型上注入危害来证明和评估多级监视器的价值。
Runtime verification or runtime monitoring equips safety-critical cyber-physical systems to augment design assurance measures and ensure operational safety and security. Cyber-physical systems have interaction failures, attack surfaces, and attack vectors resulting in unanticipated hazards and loss scenarios. These interaction failures pose challenges to runtime verification regarding monitoring specifications and monitoring placements for in-time detection of hazards. We develop a well-formed workflow model that connects system theoretic process analysis, commonly referred to as STPA, hazard causation information to lower-level runtime monitoring to detect hazards at the operational phase. Specifically, our model follows the DepDevOps paradigm to provide evidence and insights to runtime monitoring on what to monitor, where to monitor, and the monitoring context. We demonstrate and evaluate the value of multilevel monitors by injecting hazards on an autonomous emergency braking system model.
