ARTEMIS SRA 2016 Trust, Security, Robustness, and Dependability Dr. Daniel Watzenig ARTEMIS Spring Event, Vienna April 13, 2016

Ideal house – building blocks

Content of the chapter Dependability Security Robustness Resilience Standardisation Research challenges

Dependability - standards International Electrotechnical Commission Technical Committee 56 (IEC TC 56)

R&D&I challenges Systematic software engineering methods – to reduce the development complexity and increase reliability and robustness by using appropriate software models and abstractions. Dynamic configuration – as components appear and disappear as CPS devices, and communication links are established/released depending on the actual availability of network connectivity. Self-diagnostic tools and robust control algorithms – that ensure adaptability and survivability in the presence of security attacks, random faults, unpredictable events, uncertain information, and so-called sensor false positives (sensor misinterpretations). Inclusion of models of the incentives of human decision makers in the design process to improve CPS resilience. Scalable health management architectures – integrating diagnostic and prognostic capabilities from CPS to system of systems (from single board to complete aircraft) for reducing logistic impacts and Life Cycle Costs Evaluation and experimentation – using extended simulation and test-bed infrastructures for an integration of Cyber- Physical Systems Platforms that directly interface with human decisions.

R&D&I challenges Architectures – which support distribution, modularity, and fault containment units in order to isolate faults. Secure real-time systems Transparent fault tolerance – Advanced hardware-related and software-implemented fault-injection for dependability evaluation. – Provision of a generic fault-tolerance layer, independent of the application – Tolerance with respect to arbitrary failure modes of components – On-line maintenance of fault-tolerant systems – Automated reconfiguration

R&D&I challenges Certification and component-based recertification of high-dependability applications – Modular certification of a composable design – Validation of high dependability – Proof of absence of failure modes with high impact (safety criticality) – Independent validation of component interface properties – Integration and validation of legacy systems – Worst-case execution time (WCET) research (hardware, algorithms, tools) – Standardised procedures and processes to develop and design dependable SoS …

Ultimately we want From fail-safe to fail-operational (fault-tolerance, multiple redundancy) From expensive prototypes/solutions to low cost reliability and minimal redundancy based on reliable software Autonomous CPS in unconstrained operational environments trusting the dependability and robustness of multi-vendor distributed system components, tolerating environmental uncertainty, and ensuring sufficiently rigorous validation of autonomous CPS in order to attain very low failure rates. 24/7 reliability, with 100% availability, and 100% connectivity, in addition to the real-time response (time-critical, i.e. deadlines defined by the system integrators). Dependability can no longer be considered as an aspect of single, separate and encapsulated devices, but in a more and more connected world must be regarded as dependability of systems of systems (SoS).

ARTEMIS SRA 2016 April 13, 2016, Vienna