Short answer

Designers and engineers should explore methods to embed security semantics directly into their engineering data models to enable automated security risk analysis throughout the product development lifecycle.

Field: Modelling
Source: IEEE Transactions on Dependable and Secure Computing (2020)
Method: Ontology-based knowledge representation and graph-based attack path modeling.
Evidence: Strong effect

Leveraging semantic enrichment of engineering data formats like AutomationML can automate the identification of security risks in cyber-physical systems. This modelling research insight is drawn from a 2020 study published in IEEE Transactions on Dependable and Secure Computing. Using Ontology-based knowledge representation and graph-based attack path modeling., researchers explored how this design variable affects real-world outcomes. The key design takeaway: Designers and engineers should explore methods to embed security semantics directly into their engineering data models to enable automated security risk analysis throughout the product development lifecycle.

Study

ModellingHigh ImpactStrong effect

Automated Security Risk Identification via Engineering Data Semantics

Leveraging semantic enrichment of engineering data formats like AutomationML can automate the identification of security risks in cyber-physical systems.

IEEE Transactions on Dependable and Secure Computing · 2020

Key Findings

01A method for automated security risk identification based on engineering data was developed.
02Security-focused semantics for AutomationML were established using a security-enriched ontology.
03The method can construct cyber-physical attack graphs to visualize potential adversary paths.
04The proposed solution is scalable and demonstrated through a case study and prototype.

Application

Design takeaway

How to apply

When developing complex systems, consider how to represent security-relevant information within your CAD or PLM systems using standardized semantic annotations or ontologies to facilitate automated security analysis.

Project actions

01When documenting your design choices, consider how to add semantic meaning that could be used for automated analysis later.
02Explore how different data formats used in your design process could be extended with ontologies for specific purposes, like security or performance.

Method & Evidence

AimHow can semantic enrichment of engineering data representations automate the identification of security risks in cyber-physical systems?

MethodOntology-based knowledge representation and graph-based attack path modeling.

ProcedureSecurity-focused semantics were defined for AutomationML, forming a security-enriched ontology. This ontology was used to interpret engineering data, enabling the automated identification of security risk sources and consequences to construct cyber-physical attack graphs.

ContextCyber-physical systems (CPS) engineering and security risk assessment.

Variables

IVSecurity-focused semantics for AutomationML (formalized knowledge representation).

DVAutomated identification of security risks, construction of cyber-physical attack graphs.

CVEngineering data representations (AutomationML artifacts), system complexity.

Strengths & Limitations

Strengths

+Proposes a novel automated method for security risk assessment.
+Provides a formal foundation through ontology development.
+Demonstrates scalability and practical implementation.

Limitations

The complexity of creating and maintaining comprehensive security ontologies can be a significant barrier. The accuracy of automated risk identification is directly tied to the quality of the input data and the ontology's coverage.

Reliability & validity

The study's reliability is supported by a prototypical implementation and a case study. Validity is addressed through the demonstration of scalability and the formal nature of the ontology, though real-world deployment validity would require broader testing.

Think critically

To what extent can the proposed semantic approach be generalized to other engineering domains beyond cyber-physical systems, and what are the challenges in adapting it?

Design Principles

"Security by design can be achieved through the semantic enrichment of engineering data models, enabling automated risk identification."

This approach shifts security risk assessment from a manual, labor-intensive process to an automated one, enabling designers and engineers to proactively integrate security considerations early in the design lifecycle. By formalizing security knowledge within engineering artifacts, it promotes consistency and reusability of security best practices.

What This Means for Your Design

This study shows that by adding special 'security meanings' to the digital blueprints of complex systems, we can automatically find potential security problems without needing a human to check everything manually.

How to use in your project

1.Reference this study when discussing the importance of integrating security considerations from the outset of a design project and how data modeling can support this.

Add to My Project

Quick Cite

Paragraph starter

This research highlights the potential of using semantic enrichment of engineering data, such as AutomationML, to automate the identification of security risks in cyber-physical systems. By defining security-focused semantics and employing ontologies, it becomes possible to formally represent security knowledge, enabling the automated construction of attack graphs and thus facilitating a proactive security-by-design approach throughout the development lifecycle.

Source

IEEE Transactions on Dependable and Secure Computing

Automated Security Risk Identification Using AutomationML-Based Engineering Data

journal · 2020

View source

Questions About This Research

What does the research say about automated security risk identification via engineering data semantics?: Designers and engineers should explore methods to embed security semantics directly into their engineering data models to enable automated security risk analysis throughout the product development lifecycle. Evidence: IEEE Transactions on Dependable and Secure Computing (2020).
Why does "Automated Security Risk Identification via Engineering Data Semantics" matter for design?: This approach shifts security risk assessment from a manual, labor-intensive process to an automated one, enabling designers and engineers to proactively integrate security considerations early in the design lifecycle. By formalizing security knowledge within engineering artifacts, it promotes consistency and reusability of security best practices.
How can designers apply this research?: Designers and engineers should explore methods to embed security semantics directly into their engineering data models to enable automated security risk analysis throughout the product development lifecycle.
What were the main findings?: A method for automated security risk identification based on engineering data was developed.. Security-focused semantics for AutomationML were established using a security-enriched ontology.. The method can construct cyber-physical attack graphs to visualize potential adversary paths.. The proposed solution is scalable and demonstrated through a case study and prototype.
What research method was used?: Ontology-based knowledge representation and graph-based attack path modeling..
How strong is the evidence?: Evidence strength is rated Strong effect, based on a 2020 journal from IEEE Transactions on Dependable and Secure Computing.
What should I do differently in my next project?: When developing complex systems, consider how to represent security-relevant information within your CAD or PLM systems using standardized semantic annotations or ontologies to facilitate automated security analysis.
What are the limitations?: The effectiveness is dependent on the completeness and accuracy of the engineering data and the defined security ontology. The complexity of real-world systems might require further refinement of the attack graph generation.