Ángel Jesús Varela-Vaca, María Teresa Gómez-López, Rafael M. Gasca, together with our colleagues David G. Rosado, Luis E. Sánchez and Eduardo Fernández-Medina have published the article CARMEN: A framework for the verification and diagnosis of the specification of security requirements in cyber-physical systems in the journal Computers in Industry from Elsevier.

Abstract

In recent years, cyber-physical systems (CPS) are receiving great attention from society, especially in industrial environments, but this popularity has been accompanied by serious security problems. A CPS is a complex system that includes hardware and software components, with different providers and connection protocols, which forces complex data management and storage. For this reason, the construction, verification and diagnosis of security CPS becomes a great challenge, which implies a correct specification of security requirements, general system configurations and, if necessary, the diagnosis to detect the characteristics that must be modified to obtain a security configuration. In this work, we propose a framework for the verification and diagnosis of security requirements, based on the possible correct configurations of the SPI. The framework is based on the specification of security requirements and its analysis with the support of Model Driven Engineering and Software Product Line Engineering (SPLE) approaches. To illustrate its usefulness, the proposal has been applied to security requirements in an Agriculture 4.0 scenario based on automated hydroponic cultivation.