Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Complex embedded systems often contain hard to find vulnerabilities which, when exploited, have potential to cause severe damage to the operating environment and the user. Given that threats and vulnerabilities can exist within any layer of the complex eco-system, OEMs face a major challenge to ensure security throughout the device life-cycle To lower the potential risk and damage that vulnerabilities may cause, OEMs typically perform application threat analysis and security modelling. This process typically provides a high level guideline to solving security problems which can then be implemented during design and development. However, this concept presents issues where new threats or unknown vulnerability has been discovered.
To address this issue, we propose a policy-based security modelling approach, which utilises a configurable policy engine to apply new policies that counter serious threats. By utilising this approach, the traditional security modelling approaches can be enhanced and the consequences of a new threat greatly reduced.
We present a realistic use case of connected car, applying several attack scenarios. By utilising STRIDE threat modelling and DREAD risk assessment model, adequate policies are derived to protect the car assets. This approach poses advantages over the standard approach, allowing a policy update to counter a new threat, which may have otherwise required a product redesign to alleviate the issue under the traditional approach.
LanguageEnglish
Title of host publication2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings
Publisher IEEE
Pages84-89
Number of pages6
ISBN (Electronic)978-1-5386-1491-4
DOIs
Publication statusPublished - 21 Jan 2019
Event31st International IEEE System-on-Chip Conference - Washington, United States
Duration: 04 Sep 201807 Sep 2018
Conference number: 31
https://www.ieee-socc.org/

Publication series

NameIEEE International System-on-Chip Conference (SOCC): Proceedings
ISSN (Electronic)2164-1706

Conference

Conference31st International IEEE System-on-Chip Conference
Abbreviated titleIEEE SoCC
CountryUnited States
CityWashington
Period04/09/201807/09/2018
Internet address

Fingerprint

Railroad cars
Embedded systems
Risk assessment
Life cycle
Engines

Keywords

  • Security Modelling
  • Policy-based Security
  • Embedded Security
  • Threat Modelling
  • Autonomous Car
  • Cyberphysical systems
  • System-on-chip

Cite this

Hagan, M., Siddiqui, F., & Sezer, S. (2019). Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures. In 2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings (pp. 84-89). (IEEE International System-on-Chip Conference (SOCC): Proceedings). IEEE . https://doi.org/10.1109/SOCC.2018.8618544
Hagan, Matthew ; Siddiqui, Fahad ; Sezer, Sakir. / Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures. 2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings. IEEE , 2019. pp. 84-89 (IEEE International System-on-Chip Conference (SOCC): Proceedings).
@inproceedings{338a636d04d444199cc92cc03f11fa6c,
title = "Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures",
abstract = "Complex embedded systems often contain hard to find vulnerabilities which, when exploited, have potential to cause severe damage to the operating environment and the user. Given that threats and vulnerabilities can exist within any layer of the complex eco-system, OEMs face a major challenge to ensure security throughout the device life-cycle To lower the potential risk and damage that vulnerabilities may cause, OEMs typically perform application threat analysis and security modelling. This process typically provides a high level guideline to solving security problems which can then be implemented during design and development. However, this concept presents issues where new threats or unknown vulnerability has been discovered.To address this issue, we propose a policy-based security modelling approach, which utilises a configurable policy engine to apply new policies that counter serious threats. By utilising this approach, the traditional security modelling approaches can be enhanced and the consequences of a new threat greatly reduced.We present a realistic use case of connected car, applying several attack scenarios. By utilising STRIDE threat modelling and DREAD risk assessment model, adequate policies are derived to protect the car assets. This approach poses advantages over the standard approach, allowing a policy update to counter a new threat, which may have otherwise required a product redesign to alleviate the issue under the traditional approach.",
keywords = "Security Modelling, Policy-based Security, Embedded Security, Threat Modelling, Autonomous Car, Cyberphysical systems, System-on-chip",
author = "Matthew Hagan and Fahad Siddiqui and Sakir Sezer",
year = "2019",
month = "1",
day = "21",
doi = "10.1109/SOCC.2018.8618544",
language = "English",
series = "IEEE International System-on-Chip Conference (SOCC): Proceedings",
publisher = "IEEE",
pages = "84--89",
booktitle = "2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings",

}

Hagan, M, Siddiqui, F & Sezer, S 2019, Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures. in 2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings. IEEE International System-on-Chip Conference (SOCC): Proceedings, IEEE , pp. 84-89, 31st International IEEE System-on-Chip Conference, Washington, United States, 04/09/2018. https://doi.org/10.1109/SOCC.2018.8618544

Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures. / Hagan, Matthew; Siddiqui, Fahad ; Sezer, Sakir.

2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings. IEEE , 2019. p. 84-89 (IEEE International System-on-Chip Conference (SOCC): Proceedings).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures

AU - Hagan, Matthew

AU - Siddiqui, Fahad

AU - Sezer, Sakir

PY - 2019/1/21

Y1 - 2019/1/21

N2 - Complex embedded systems often contain hard to find vulnerabilities which, when exploited, have potential to cause severe damage to the operating environment and the user. Given that threats and vulnerabilities can exist within any layer of the complex eco-system, OEMs face a major challenge to ensure security throughout the device life-cycle To lower the potential risk and damage that vulnerabilities may cause, OEMs typically perform application threat analysis and security modelling. This process typically provides a high level guideline to solving security problems which can then be implemented during design and development. However, this concept presents issues where new threats or unknown vulnerability has been discovered.To address this issue, we propose a policy-based security modelling approach, which utilises a configurable policy engine to apply new policies that counter serious threats. By utilising this approach, the traditional security modelling approaches can be enhanced and the consequences of a new threat greatly reduced.We present a realistic use case of connected car, applying several attack scenarios. By utilising STRIDE threat modelling and DREAD risk assessment model, adequate policies are derived to protect the car assets. This approach poses advantages over the standard approach, allowing a policy update to counter a new threat, which may have otherwise required a product redesign to alleviate the issue under the traditional approach.

AB - Complex embedded systems often contain hard to find vulnerabilities which, when exploited, have potential to cause severe damage to the operating environment and the user. Given that threats and vulnerabilities can exist within any layer of the complex eco-system, OEMs face a major challenge to ensure security throughout the device life-cycle To lower the potential risk and damage that vulnerabilities may cause, OEMs typically perform application threat analysis and security modelling. This process typically provides a high level guideline to solving security problems which can then be implemented during design and development. However, this concept presents issues where new threats or unknown vulnerability has been discovered.To address this issue, we propose a policy-based security modelling approach, which utilises a configurable policy engine to apply new policies that counter serious threats. By utilising this approach, the traditional security modelling approaches can be enhanced and the consequences of a new threat greatly reduced.We present a realistic use case of connected car, applying several attack scenarios. By utilising STRIDE threat modelling and DREAD risk assessment model, adequate policies are derived to protect the car assets. This approach poses advantages over the standard approach, allowing a policy update to counter a new threat, which may have otherwise required a product redesign to alleviate the issue under the traditional approach.

KW - Security Modelling

KW - Policy-based Security

KW - Embedded Security

KW - Threat Modelling

KW - Autonomous Car

KW - Cyberphysical systems

KW - System-on-chip

U2 - 10.1109/SOCC.2018.8618544

DO - 10.1109/SOCC.2018.8618544

M3 - Conference contribution

T3 - IEEE International System-on-Chip Conference (SOCC): Proceedings

SP - 84

EP - 89

BT - 2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings

PB - IEEE

ER -

Hagan M, Siddiqui F, Sezer S. Policy-Based Security Modelling and Enforcement Approach for Emerging Embedded Architectures. In 2018 31st IEEE International System-on-Chip Conference (SOCC): Proceedings. IEEE . 2019. p. 84-89. (IEEE International System-on-Chip Conference (SOCC): Proceedings). https://doi.org/10.1109/SOCC.2018.8618544