An Evaluation Ontology Applied to Connected Vehicle Security Assurance

Stephen Powley; Simon Perry; Jon  Holt; Jeremy Bryans

doi:10.1002/j.2334-5837.2019.00588.x

An Evaluation Ontology Applied to Connected Vehicle Security Assurance

Stephen Powley, Simon Perry, Jon Holt, Jeremy Bryans

Scarecrow Consultants Ltd

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding › peer-review

150 Downloads (Pure)

Abstract

Connected vehicles have great potential to benefit society, yet create huge challenges. Vehicles, infrastructure and enterprise activities combine to form massively complex systems of systems (SoSs) that are vulnerable to cyber-attacks. Security is ill-defined, making it difficult to achieve a consistent, common understanding of security capabilities across the diverse industries that collaborate to develop connected vehicles. Rigorous evaluation is essential for developing strong security assurance cases. This paper contributes a model-based systems engineering (MBSE) on- tology that enables integrated evaluation processes in enterprise SoSs. The Evaluation Ontology allows diverse types of evaluation to be captured in a single integrated model. A connected vehicle security story is presented to demonstrate the value of the approach. Benefits include enhanced business intelligence that can provide a quantifiable, reportable level of confidence in securi- ty-related processes and technologies. Further work will extend the ontology to develop a cus- tomisable suite of enabling patterns for security.

Original language	English
Title of host publication	INCOSE International Symposium
Subtitle of host publication	The Proceedings of the Annual INCOSE International Symposium
Place of Publication	USA
Publisher	Wiley
Pages	37-52
Number of pages	16
Volume	29
Edition	1
DOIs	https://doi.org/10.1002/j.2334-5837.2019.00588.x
Publication status	E-pub ahead of print - 27 Sept 2019
Event	29th Annual INCOSE International Symposium - Orlando, United States Duration: 20 Jul 2019 → 25 Jul 2019 Conference number: 29 https://www.incose.org/symp2019/home

Publication series

Name	INCOSE Proceedings
Publisher	Wiley
ISSN (Electronic)	2334-5837

Conference

Conference	29th Annual INCOSE International Symposium
Country/Territory	United States
City	Orlando
Period	20/07/19 → 25/07/19
Internet address	https://www.incose.org/symp2019/home

Bibliographical note

This is the peer reviewed version of the following article: Powley, S, Perry, S, Holt, J & Bryans, J 2019, An Evaluation Ontology Applied to Connected Vehicle Security Assurance. in INCOSE International Symposium: The Proceedings of the Annual INCOSE International Symposium. 1 edn, vol. 29, INCOSE Proceedings, Wiley, USA, pp. 37-52, 29th Annual INCOSE International Symposium, Orlando, United States, 20/07/19 which has been published in final form at https://onlinelibrary.wiley.com/doi/abs/10.1002/j.2334-5837.2019.00588.x
This article may be used for non-commercial purposes in accordance with Wiley Terms and Conditions for Self-Archiving.

Copyright © and Moral Rights are retained by the author(s) and/ or other copyright owners. A copy can be downloaded for personal non-commercial research or study, without prior permission or charge. This item cannot be reproduced or quoted extensively from without first obtaining permission in writing from the copyright holder(s). The content must not be changed in any way or sold commercially in any format or medium without the formal permission of the copyright holders.

Keywords

MBSE
model-based systems engineering
cybersecurity
ontology
evaluation
automotive
standard
security

Access to Document

10.1002/j.2334-5837.2019.00588.x

Post-PrintAccepted author manuscript, 1.38 MB

Jeremy Bryans
- Centre for Future Transport and Cities - Assistant Professor Research
Person: Teaching and Research

Cite this

An Evaluation Ontology Applied to Connected Vehicle Security Assurance. / Powley, Stephen; Perry, Simon; Holt, Jon et al.
INCOSE International Symposium: The Proceedings of the Annual INCOSE International Symposium. Vol. 29 1. ed. USA: Wiley, 2019. p. 37-52 (INCOSE Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding › peer-review

Powley, S, Perry, S, Holt, J & Bryans, J 2019, An Evaluation Ontology Applied to Connected Vehicle Security Assurance. in INCOSE International Symposium: The Proceedings of the Annual INCOSE International Symposium. 1 edn, vol. 29, INCOSE Proceedings, Wiley, USA, pp. 37-52, 29th Annual INCOSE International Symposium, Orlando, Florida, United States, 20/07/19. https://doi.org/10.1002/j.2334-5837.2019.00588.x

@inproceedings{59d12d60c7da474caad484c5783f832e,

title = "An Evaluation Ontology Applied to Connected Vehicle Security Assurance",

abstract = "Connected vehicles have great potential to benefit society, yet create huge challenges. Vehicles, infrastructure and enterprise activities combine to form massively complex systems of systems (SoSs) that are vulnerable to cyber-attacks. Security is ill-defined, making it difficult to achieve a consistent, common understanding of security capabilities across the diverse industries that collaborate to develop connected vehicles. Rigorous evaluation is essential for developing strong security assurance cases. This paper contributes a model-based systems engineering (MBSE) on- tology that enables integrated evaluation processes in enterprise SoSs. The Evaluation Ontology allows diverse types of evaluation to be captured in a single integrated model. A connected vehicle security story is presented to demonstrate the value of the approach. Benefits include enhanced business intelligence that can provide a quantifiable, reportable level of confidence in securi- ty-related processes and technologies. Further work will extend the ontology to develop a cus- tomisable suite of enabling patterns for security.",

keywords = "MBSE, model-based systems engineering, cybersecurity, ontology, evaluation, automotive, standard, security",

author = "Stephen Powley and Simon Perry and Jon Holt and Jeremy Bryans",

note = "This is the peer reviewed version of the following article: Powley, S, Perry, S, Holt, J & Bryans, J 2019, An Evaluation Ontology Applied to Connected Vehicle Security Assurance. in INCOSE International Symposium: The Proceedings of the Annual INCOSE International Symposium. 1 edn, vol. 29, INCOSE Proceedings, Wiley, USA, pp. 37-52, 29th Annual INCOSE International Symposium, Orlando, United States, 20/07/19 which has been published in final form at https://onlinelibrary.wiley.com/doi/abs/10.1002/j.2334-5837.2019.00588.x This article may be used for non-commercial purposes in accordance with Wiley Terms and Conditions for Self-Archiving. Copyright {\textcopyright} and Moral Rights are retained by the author(s) and/ or other copyright owners. A copy can be downloaded for personal non-commercial research or study, without prior permission or charge. This item cannot be reproduced or quoted extensively from without first obtaining permission in writing from the copyright holder(s). The content must not be changed in any way or sold commercially in any format or medium without the formal permission of the copyright holders. ; 29th Annual INCOSE International Symposium ; Conference date: 20-07-2019 Through 25-07-2019",

year = "2019",

month = sep,

day = "27",

doi = "10.1002/j.2334-5837.2019.00588.x",

language = "English",

volume = "29",

series = "INCOSE Proceedings",

publisher = "Wiley",

pages = "37--52",

booktitle = "INCOSE International Symposium",

address = "Germany",

edition = "1",

url = "https://www.incose.org/symp2019/home",

}

TY - GEN

T1 - An Evaluation Ontology Applied to Connected Vehicle Security Assurance

AU - Powley, Stephen

AU - Perry, Simon

AU - Holt, Jon

AU - Bryans, Jeremy

N1 - Conference code: 29

PY - 2019/9/27

Y1 - 2019/9/27

N2 - Connected vehicles have great potential to benefit society, yet create huge challenges. Vehicles, infrastructure and enterprise activities combine to form massively complex systems of systems (SoSs) that are vulnerable to cyber-attacks. Security is ill-defined, making it difficult to achieve a consistent, common understanding of security capabilities across the diverse industries that collaborate to develop connected vehicles. Rigorous evaluation is essential for developing strong security assurance cases. This paper contributes a model-based systems engineering (MBSE) on- tology that enables integrated evaluation processes in enterprise SoSs. The Evaluation Ontology allows diverse types of evaluation to be captured in a single integrated model. A connected vehicle security story is presented to demonstrate the value of the approach. Benefits include enhanced business intelligence that can provide a quantifiable, reportable level of confidence in securi- ty-related processes and technologies. Further work will extend the ontology to develop a cus- tomisable suite of enabling patterns for security.

AB - Connected vehicles have great potential to benefit society, yet create huge challenges. Vehicles, infrastructure and enterprise activities combine to form massively complex systems of systems (SoSs) that are vulnerable to cyber-attacks. Security is ill-defined, making it difficult to achieve a consistent, common understanding of security capabilities across the diverse industries that collaborate to develop connected vehicles. Rigorous evaluation is essential for developing strong security assurance cases. This paper contributes a model-based systems engineering (MBSE) on- tology that enables integrated evaluation processes in enterprise SoSs. The Evaluation Ontology allows diverse types of evaluation to be captured in a single integrated model. A connected vehicle security story is presented to demonstrate the value of the approach. Benefits include enhanced business intelligence that can provide a quantifiable, reportable level of confidence in securi- ty-related processes and technologies. Further work will extend the ontology to develop a cus- tomisable suite of enabling patterns for security.

KW - MBSE

KW - model-based systems engineering

KW - cybersecurity

KW - ontology

KW - evaluation

KW - automotive

KW - standard

KW - security

U2 - 10.1002/j.2334-5837.2019.00588.x

DO - 10.1002/j.2334-5837.2019.00588.x

M3 - Conference proceeding

VL - 29

T3 - INCOSE Proceedings

SP - 37

EP - 52

BT - INCOSE International Symposium

PB - Wiley

CY - USA

T2 - 29th Annual INCOSE International Symposium

Y2 - 20 July 2019 through 25 July 2019

ER -

An Evaluation Ontology Applied to Connected Vehicle Security Assurance

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Fingerprint

Profiles

Jeremy Bryans

Cite this