Road-Map Towards the Adoption of Dynamic Trust Assurances for Safety and Security Convergence in Safety-Critical Systems - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Road-Map Towards the Adoption of Dynamic Trust Assurances for Safety and Security Convergence in Safety-Critical Systems

Francesca Bassi

Résumé

The emerging edge-cloud continuum that comprises complex safety-critical systems (spanning from specialized embedded systems to highly capable computing systems running on the cloud or MEC), has the potential to significantly enhance the digital life of individuals but it also brings new challenges (or rather makes old unsolved challenges urgent to be solved), with trust being one of the major concerns. The need for provisioning dynamic trust management is rooted in the fact that cyber-physical systems, made of components supplied by multiple vendors, and increasingly integrated with global information and management networks, constitute ever more complex “Systems-of-Systems” with no single tenant or provider. A good example are automotive systems, where ECUs in cars are produced by suppliers, integrated into cars by the OEMs, car owners bring third-party devices like smartphones, and everything is connected to automotive backend systems and roadside-infrastructure via wireless communication. It is an illusion to believe that such a SoS may adhere to a holistic security policy and that traditional perimeter security is sufficient for securing it. Furthermore, security cannot be seen in an isolated way, but must be considered also in the face of the safety of the overall system. Simply disabling some communication for security reasons may leave the system in an unsafe state and lead to further damage. In this context, the CONNECT project aims to the convergence of security and safety by including trust management as a functional component of the safety-critical application: Assess dynamic trust relationships and define adequate trust models based on which involved entities can establish trust for cooperatively executing safety-critical functions. Focusing on the next generation of Intelligent Transport Systems (ITS) enabling Connected Cooperative Automated Mobility (CCAM), the project establishes a trust reasoning framework rooted in the Zero-Trust concept for bootstrapping vertical trust from the vehicle up to the MEC and cloud environment. This trust management framework provides the formalism to describe the functional trust relationships between entities involved in a cooperative task (different vehicles on the road; different on-board components on the same vehicle); and to dynamically assess the strength of those trust relationships, based on the exchanged data. Such an approach makes, for instance, possible to safely combine the vehicle’s systems with information available in the MEC, thus expanding the knowledge on the environment required for decision making, allowing outsourcing of the calculations in a trustworthy way to the backend, and ultimately helping to make faster decisions, cooperatively and without delay, increasing the safety of CCAM. By coupling the Zero-Trust security principle with the need of “Never Trust, Always Verify”, CONNECT reaches its full potential: not only does it mitigates risks stemming from the Zero-Trust CCAM environment but also ensures resilience. This new security paradigm is the key element for having certifiable, more agile levels of trustworthiness to automotive services and translates to long-term consumer confidence, which is a requirement for end-user adoption.

Mots clés

Fichier non déposé

Dates et versions

hal-04253860 , version 1 (23-10-2023)

Identifiants

  • HAL Id : hal-04253860 , version 1

Citer

Francesca Bassi. Road-Map Towards the Adoption of Dynamic Trust Assurances for Safety and Security Convergence in Safety-Critical Systems. ETSI Security Conference 2023, Oct 2023, Sophia-Antipolis (France), France. ⟨hal-04253860⟩

Collections

IRT-SYSTEMX
31 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More