Data-flow-based adaption of the System-Theoretic Process Analysis for Security (STPA-Sec).

ABSTRACT: Security analysis is an essential activity in security engineering to identify potential system vulnerabilities and specify security requirements in the early design phases. Due to the increasing complexity of modern systems, traditional approaches lack the power to identify insecure incidents caused by complex interactions among physical systems, human and social entities. By contrast, the System-Theoretic Process Analysis for Security (STPA-Sec) approach views losses as resulting from interactions, focuses on controlling system vulnerabilities instead of external threats, and is applicable for complex socio-technical systems. However, the STPA-Sec pays less attention to the non-safety but information-security issues (e.g., data confidentiality) and lacks efficient guidance for identifyin

SUBMITTER: Yu J 

PROVIDER: S-EPMC7959614 | biostudies-literature | 2021

REPOSITORIES: biostudies-literature