An IEC 62443-security oriented domain specific modelling language - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2024

An IEC 62443-security oriented domain specific modelling language

Jolahn Vaudey
  • Fonction : Auteur
  • PersonId : 1215849
Eric Rutten

Résumé

As the historically isolated industrial control systems become increasingly connected, the threat posed by cyberattacks soars. To remedy this issue, industrial standards dedicated to the cybersecurity of ICS have been developed in the last twenty years, namely the IEC 62443 series. These standards provide guidelines to the creation and maintenance of a secure ICS, from the concept phase to its eventual disposal. This standard notably assume a specific Zone/Conduit model for systems, as a basis for building the security program. This model currently lacks computer-aided design tools, which are essential to the adoption of a standard. In this paper, we will present a domain specific modeling language, able to describe IEC 62443 compliant systems. Our main contributions are the DSL's syntax, which tries to formalize the informal model found in the standard, and the validation rules applied to it that ensure the described installations are secure by design, according to a set of hypotheses.
Fichier non déposé

Dates et versions

hal-04600593 , version 1 (04-06-2024)

Licence

Identifiants

Citer

Jolahn Vaudey, Stéphane Mocanu, Gwenaël Delaval, Eric Rutten. An IEC 62443-security oriented domain specific modelling language. ARES 2024 - 19th International Conference on Availability, Reliability and Security, Jul 2024, Vienne, Austria. ⟨10.1145/3664476.3670938⟩. ⟨hal-04600593⟩
9 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More