TY - GEN
T1 - STPA-Driven Multilevel Runtime Monitoring for In-Time Hazard Detection
AU - Gautham, Smitha
AU - Bakirtzis, Georgios
AU - Will, Alexander
AU - Jayakumar, Athira Varma
AU - Elks, Carl R.
N1 - Publisher Copyright:
© 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.
PY - 2022/1/1
Y1 - 2022/1/1
N2 - Runtime verification or runtime monitoring equips safety-critical cyber-physical systems to augment design assurance measures and ensure operational safety and security. Cyber-physical systems have interaction failures, attack surfaces, and attack vectors resulting in unanticipated hazards and loss scenarios. These interaction failures pose challenges to runtime verification regarding monitoring specifications and monitoring placements for in-time detection of hazards. We develop a well-formed workflow model that connects system theoretic process analysis, commonly referred to as STPA, hazard causation information to lower-level runtime monitoring to detect hazards at the operational phase. Specifically, our model follows the DepDevOps paradigm to provide evidence and insights to runtime monitoring on what to monitor, where to monitor, and the monitoring context. We demonstrate and evaluate the value of multilevel monitors by injecting hazards on an autonomous emergency braking system model.
AB - Runtime verification or runtime monitoring equips safety-critical cyber-physical systems to augment design assurance measures and ensure operational safety and security. Cyber-physical systems have interaction failures, attack surfaces, and attack vectors resulting in unanticipated hazards and loss scenarios. These interaction failures pose challenges to runtime verification regarding monitoring specifications and monitoring placements for in-time detection of hazards. We develop a well-formed workflow model that connects system theoretic process analysis, commonly referred to as STPA, hazard causation information to lower-level runtime monitoring to detect hazards at the operational phase. Specifically, our model follows the DepDevOps paradigm to provide evidence and insights to runtime monitoring on what to monitor, where to monitor, and the monitoring context. We demonstrate and evaluate the value of multilevel monitors by injecting hazards on an autonomous emergency braking system model.
KW - Cyber-physical systems
KW - Dynamic safety management
KW - Hazard analysis
KW - Runtime monitors
KW - Runtime verification
KW - STPA
UR - https://www.scopus.com/pages/publications/85138003582
U2 - 10.1007/978-3-031-14835-4_11
DO - 10.1007/978-3-031-14835-4_11
M3 - Conference contribution
AN - SCOPUS:85138003582
SN - 9783031148347
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 158
EP - 172
BT - Computer Safety, Reliability, and Security - 41st International Conference, SAFECOMP 2022, Proceedings
A2 - Trapp, Mario
A2 - Saglietti, Francesca
A2 - Spisländer, Marc
A2 - Bitsch, Friedemann
PB - Springer Science and Business Media Deutschland GmbH
T2 - 41st International Conference on Computer Safety, Reliability and Security, SAFECOMP 2022
Y2 - 6 September 2022 through 9 September 2022
ER -