Computer Safety, Reliability, and Security. SAFECOMP 2024 Workshops

Name: Computer Safety, Reliability, and Security. SAFECOMP 2024 Workshops | DECSoS, SASSUR, TOASTS, and WAISE, Florence, Italy, September 17, 2024, Proceedings
Brand: Springer
Price: 128.39 EUR
Availability: OnlineOnly

DECSoS, SASSUR, TOASTS, and WAISE, Florence, Italy, September 17, 2024, Proceedings

Andrea Ceccarelli Mario Trapp Andrea Bondavalli Erwin Schoitsch Barbara Gallina Friedemann Bitsch(Herausgeber*in)

Springer (Verlag)

Erschienen am 8. September 2024

XVI, 462 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-031-68738-9 (ISBN)

128,39 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Intro
Preface
Organization
Contents
19th International ERCIM/EWICS Workshop on Dependable Smart Embedded Cyber-Physical Systems and Systems-of Systems (DECSoS 2024)
19th International Workshop on Dependable Smart Cyber-Physical Systems and Systems-of-Systems (DECSoS 2024)
1 Introduction
2 This Year's Workshop
Organization
International Program Committee 2024
A Systems Viewpoint on the Integration of Subsystems Developed with Heterogeneous Safety Standards
1 The Need for Integration
2 Why Existing Standards Don't Play Nicely Together
2.1 How Existing Standards Differ
2.2 Current Approaches to Importance Metrics
2.3 Summary of Integration Challenges
3 Addressing the Integration Issue
3.1 Existing Approaches
3.2 The IEC 63187 Approach
4 Conclusion
References
Intelligent Decision-Making in Lane Detection Systems Featuring Dynamic Framework for Autonomous Vehicles
1 Introduction
2 Background
2.1 AI-Based Approaches
2.2 Non AI-Based Approaches
2.3 Hybrid Approaches
3 Proposed Dynamic Framework
3.1 Experimental Setup - Vehicle Demonstrator
3.2 Conventional Algorithm
3.3 PilotNetC Architecture
4 Results
4.1 Results for Conventional Algorithms
4.2 Results for PilotNetC
4.3 The Dynamic Framework
5 Conclusion
References
Security and Safety in Urban Environments: Evaluating Threats and Risks of Autonomous Last-Mile Delivery Robots
1 Introduction
2 The Last-Mile Robot in Our Case Study
3 Case Study Modeling and Analysis
3.1 Extended Multi-level Model
3.2 Attack Types
4 Analysis of Attack Types and Human-Safety Levels
5 Ideas for a Theoretical Approach
6 Summary and Outlook
References
Safe Road-Crossing by Autonomous Wheelchairs: A Novel Dataset and Its Evaluation
1 Introduction
2 Related Works
3 Reference Scenario for Safe Road-Crossing
4 Design of the Danger Function
5 Dataset Generation
5.1 Lab Environment
5.2 Data Collection and Preprocessing
5.3 Data Elaboration and Sensor Fusion
6 Experimental Evaluation
7 Threats to Validity
8 Conclusions
References
Automating an Integrated Model-Driven Approach to Analysing the Impact of Cyberattacks on Safety
1 Introduction
2 Safety-Critical Networked Control Systems
3 Security-Explicit SysML Modelling of NCSs
3.1 SysML Modeling of NCSs
3.2 Modelling Cyberattacks in SysML
4 Modelling and Refinement in Event-B
5 Generation of Event-B Specification from SysML Model
5.1 Architecture of SysMLToEventB
5.2 The Tool-Chain
5.3 Tool Validation
6 Related Work and Conclusions
References
Securing Web Access: PUF-Driven Two-Factor Authentication for Enhanced Protection
1 Introduction
1.1 Contributions
2 Related Work
3 Preliminaries
3.1 Physically Unclonable Function
3.2 Network Model
3.3 Threat Assumptions
4 Two-Factor User Authentication Using PUF
4.1 Enrollment Phase
4.2 Authentication Phase
5 Security Analysis
5.1 Formal Security Analysis
5.2 Informal Analysis
6 Experimental Validation and Performance Analysis
References
Enhancing Tunnel Safety with Artery V2X Simulation for Real-Time Risk Assessment
1 Introduction
2 Related Work
3 Artery-Based Risk Assessment Framework
3.1 Artery Simulation Framework (Upper Part)
3.2 Data Manipulation and Risk Assessment (Lower Part)
4 Case Study: Simulation-Based Risk Assessment in Zederhaus Tunnel
4.1 Breakdown Scenario: Artery and SUMO Model
4.2 Breakdown Scenario: Risk Assessment
5 Conclusion and Future Work
References
Detecting and Mitigating Errors in Neural Networks
1 Introduction
2 State of the Art
2.1 Error Correcting Memory (ECC Memory)
2.2 Memory Tagging
2.3 Storage Reduction
2.4 2-D ECC/2-D Cyclic Redundancy Check (CRC)
3 Layer Properties
4 The Proposed Framework
4.1 Preparation Step
4.2 Error Detection Phase
4.3 Error Correction Phase
5 Practical Examples
5.1 Deviation in the Weight
5.2 Deviation in the Architecture or the Activation Function
6 Conclusion
References
11th International Workshop on Next Generation of System Assurance Approaches for Critical Systems (SASSUR 2024)
11th International Workshop on Next Generation of System Assurance Approaches for Critical Systems (SASSUR 2024)
1 Introduction
2 This Year's Workshop
Organization
Workshop Committees
Organization Committee
Programme Committee
Additional Reviewers
Challenges and Limitations of Utilizing Multi-core/Heterogeneous Logic Elements in the Railway Signaling Applications
1 Introduction
2 Railway Signaling System
3 EN 50129:2018: Hardware Requirements and Guidelines to Achieve SIL 4
4 Architecture of State-of-the-Art Object Controller
5 Analysis of Using the Latest Logic Elements in Railway Signaling Systems
6 Conclusion
7 Future Work
References
Identifying Difficult Environmental Conditions with Scenario-Based Hazard and Fault Analysis
1 Introduction
2 Related Work
3 Identifying Triggering Conditions with SHFA
3.1 Step One: Scenario Modelling
3.2 Step Two: Hazardous Maneuver Identification
3.3 Step Three: Triggering Condition Identification
4 Illustrative Example
4.1 Scenario Modelling
4.2 Hazardous Maneuver Identification
4.3 Triggering Condition Identification
5 Result Analysis and Discussion
5.1 Triggering Condition Formalization
5.2 Findings
5.3 Capabilities and Limitations
6 Conclusion and Outlook
References
Using GPT-4 to Generate Failure Logic
1 Introduction
2 FLAGPT: Developing a Failure Logic Analysis GPT
3 Task and System Descriptions
4 Results and Working Experience
4.1 Tank Overfill Failure Event
4.2 Air Bleed Cabin Supply System
4.3 Aircraft Wheel Brake and Gas Leak Systems
4.4 Alignment and Consistency
5 Conclusions
References
Towards an Argument Pattern for the Use of Safety Performance Indicators
1 Introduction
2 Background
3 A High-Level Argument Structure for Using SPIs
3.1 Systematic Definition of SPIs
3.2 Collection and Analysis of SPIs
3.3 Response to SPI Violations
4 Critical Analysis of the Argument About SPIs
5 Meta-SPIs to Validate the Argument About SPIs
6 Related Work
7 Summary and Future Work
References
Enabling Theory-Based Continuous Assurance: A Coherent Approach with Semantics and Automated Synthesis
1 Introduction
2 Methodological Foundations for Continuous Assurance
2.1 Composing Assurance Cases with Theories and Defeater Patterns
2.2 Assessing Assurance Case for Soundness and Validity
3 Tools Support for Continuous Assurance
3.1 Property-Driven Semantics with LLM Support and Synthesized Prolog Logic-Based Analysis
3.2 Synthesis Assistant for Generating Assurance Cases
3.3 Continuous Assurance for CI/CD Software Designs Using ETB
4 Conclusion
References
Managing Changing Product Liability Obligations Emerging from New Proposed EU Directive
1 Introduction
1.1 Background
1.2 Recent and Ongoing Changes to the Legal Framework
1.3 Scope and Structure
2 How Automation Impacts Risk and Liability Obligations
3 The Socio-technical System Perspective
4 Impact of New EU Product Liability Directive
4.1 Overview of Changes
4.2 Overall Impact on Product Liability Obligations
4.3 Impact on Liability Obligations Due to the Presumption of Defectiveness
4.4 Impact on Liability Obligations Due to the Presumption of Causality
5 Thoughts on Transparent and Efficient Management of Product Liability Obligations
5.1 Manufacturers' Defense Strategies
5.2 Liability Obligations Expressed in Modular Assurance Cases and Contracts
5.3 Integration of Present Assurance Cases Required by Standards
5.4 Capture Confidence in the Strength of Defense Through Independent and Continuous Assessments of the Modular Assurance Cases
5.5 Using Assurance Cases for Rebutting Other Presumptions in New PLD
6 Discussion, Conclusions and Further Work
References
Reaching Consensus on System-of-Systems Resilience Assurance: A Case of Mobility as a Service
1 Introduction
2 Concepts and Related Works
2.1 System Theoretic Process Analysis
2.2 Consensus Process Model
2.3 Mobility as a Service
3 Resilience Argumentation
3.1 Step 1: Identify Loss Scenarios
3.2 Step 2: Identify Resilience Requirement
4 Conflict and Consensus
4.1 Assumption
4.2 Conflict
4.3 Consensus Process Model
4.4 Example
5 Conclusion and Further Work
References
A Deductive Approach to Safety Assurance: Formalising Safety Contracts with Subjective Logic
1 Introduction
2 Background
2.1 Safety Assurance
2.2 Subjective Logic
3 A Formally Grounded Assurance Argument Structure
4 Constructing the Argument and Computing Confidence
5 Related Work
6 Discussion and Conclusions
References
A New Approach to Creating Clear Operational Safety Arguments
1 Introduction
2 Related Work
3 Proposed Approach
4 Illustrative Examples
5 Conclusions and Future Work
References
Including Defeaters in Quantitative Confidence Assessments for Assurance Cases
1 Introduction
2 Adding Defeaters to Confidence Assessment
2.1 Terminology
2.2 Rules for Defeaters in Confidence Assessment
3 Adding Defeaters to the BBN Method
3.1 Overview of the Original Method
3.2 Adding Defeaters to the BBN Method
4 Evaluation
5 Discussion
References
1st International Workshop TOwards A Safer systems' architecture Through Security (TOASTS 2024)
International Workshop TOwards A Safer Systems' Architecture Through Security (TOASTS 2024)
1 Introduction
2 This Year's Workshop
Organization
International Program Committee 2024
Multivariate Security Breach Probability: The Gordon-Loeb Model with Copulas
1 Investment in Cyber Security: The GL Model
2 Aggregate Vulnerability: The Copula Functions Approach
2.1 Multiple Attacks
2.2 Multiple Technologies
References
Quantum Machine Learning: Perspectives in Cybersecurity
1 Introduction
2 Notation and Formalism
3 Shadow Protocol for Training a Quantum GAN
4 Parametric Model on a Quantum Annealer
5 Conclusions
References
Security Modeling Challenges and Research Directions Around the ADVISE Meta Framework
1 Introduction
2 Background
3 Addressing Challenges
3.1 Challenge 1
3.2 Challenge 2
3.3 Challenge 3
3.4 Challenge 4
4 Conclusions
References
Capability Ambient DO - A Usable Tool for Linux System Security
1 Introduction
2 State of the Art
3 Implementation
3.1 Script Cado
4 Conclusions
5 Related Works
References
VUOS: A User-Space Hypervisor Based on System Call Hijacking
1 Introduction
2 State of the Art
3 Background
4 VUOS Hypervisor Implementation
5 umvu Usage, Modules and Submodules
6 Use Cases
7 Results
8 Related Works
9 Conclusions
References
Cyber Risk Propagation on Networks
1 Introduction
2 Model
2.1 Defender's Strategy and Contagion
2.2 Attacker's Strategy
2.3 Conditions for the Existence and Uniqueness of Equilibria
3 Approximations of the Optimal Security Investments
4 Numerical Simulations
5 Conclusions
References
Where Do Safety and Security Mutually Reinforce? A Multi-level Model-Based Approach for a Consistent Interplay
1 Introduction
2 Background
3 Proposed Approach
4 Approach Instantiation
5 Related Work and Positioning
6 Future Work
References
7th International Workshop on Artificial Intelligence Safety Engineering (WAISE 2024)
Seventh International Workshop on Artificial Intelligence Safety Engineering (WAISE 2024)
1 Introduction
2 Programme
A Flow-Based Credibility Metric for Safety-Critical Pedestrian Detection
1 Introduction
2 Methodology
2.1 Motivation on c-Flow
2.2 Metric Design: c-Flow
2.3 Handling the Absence of Ground Truth in Unsupervised Use Cases
3 Experimental Setup
3.1 Datasets and the Pedestrian Detector
3.2 Pedestrian Track Selection on Argoverse 1.1
3.3 RAFT: Optical Flow-Based Motion Estimation
4 Experimental Results
4.1 c-Flow Evaluation: TP vs. FN
4.2 FN in an Unsupervised Setting
5 Related Work
6 Conclusion
References
Position Paper - Bringing Classifiers into Critical Systems: Are We Barking up the Wrong Tree?
1 Introduction
2 Fail-Omission Components in Critical Systems
3 Rejecting Classifiers' Predictions
4 Fail-Controlled Classifiers in Critical Systems
5 Other Notable Approaches
6 Conclusions and Perspective
References
Homeopathic Poisoning of RAG Systems
1 Introduction
2 Background and Related Work
3 Problem Formulation and Attack Design
3.1 Threat Model
3.2 Design of HOPRAG
4 Experiment
4.1 Methodology and Settings
4.2 Discussion of the Results
5 Conclusion and Future Work
References
Enclosing Prototypical Variational Autoencoder for Explainable Out-of-Distribution Detection
1 Introduction
2 Related Work
3 Methodology
4 Experimental Results
4.1 OOD Detection Performance
4.2 Ablation Study: ProtoVAE vs. ProtoDistVAE
4.3 Reconstruction
5 Conclusion
References
Language Models as Reasoners for Out-of-Distribution Detection
1 Introduction
2 Background
2.1 Out-of-Distribution Detection
2.2 OOD Detection with Logical Reasoning
2.3 Large Language Models
3 OOD Detection with LLM Reasoners
3.1 Input
3.2 Perception
3.3 Instruction Synthesis
3.4 Reasoning
3.5 Score Calculation
4 Evaluation
4.1 In-distribution Data
4.2 Out-of-Distribution Data
4.3 Results
5 Discussion
5.1 Advantages
5.2 Limitations
6 Conclusion
References
Uncertainty-Aware Evaluation of Quantitative ML Safety Requirements
1 Introduction
2 Background and Related Work
2.1 Relevant Concepts from Safety Standards
2.2 Assurance Uncertainty and ML Safety
3 Subjective Logic (SL)
4 Evaluating Confidence in Quantitative Evidence
4.1 Summary of the Approach
4.2 Defining the Safety Contract
4.3 Formulating Evidence as Opinions in SL
4.4 Evaluating Causes of Uncertainty in the Evidence
4.5 Adjusting Opinions Using Trust Discounting
4.6 Considering Additional Evidence Using Cumulative Belief Fusion
5 Conclusions and Future Work
References
Dual-Process System: An Architectural Pattern for Assurable Autonomous Robots Inspired by Dual-Process Theory
1 Introduction
2 Background and Related Work
3 Architectural Pattern: Dual Process System
References
Bridging the Reality Gap: Assurable Simulations for an ML-Based Inspection Drone Flight Controller
1 Introduction
2 Example Description ML Based Flight Controller
2.1 Simulation Based Training
3 Assurance Approach
3.1 Contextual Elements
3.2 Assurance of the Models
3.3 Simulation Scenario Assurance
3.4 Simulation Tool Quality
4 Real-World Experiments
5 Wider Considerations and Related Work
5.1 Wider Considerations
5.2 Related Literature
6 Conclusions and Next Steps
References
LLMs in Web Development: Evaluating LLM-Generated PHP Code Unveiling Vulnerabilities and Limitations
1 Introduction
2 Motivation
3 Related Work
3.1 LLMs in Web Development
3.2 AI Generated Datasets
4 Methodology for the ChatPHP Dataset Generation
4.1 Code Generation
4.2 Experimental Setup and Classification
4.3 Vulnerability Scanning and Testing
5 Results
5.1 Dynamic Analysis
5.2 Static Analysis
5.3 Manual Code Audit
5.4 Penetration Testing
5.5 Discussion on Results
6 Limitations and Future Research
6.1 Limitations and Threats to Validity
6.2 Future Research Directions
7 Conclusions
References
Neuro-Symbolic Artificial Intelligence for Safety Engineering
1 Introduction
2 Neural-Symbolic Artificial Intelligence
2.1 Models
2.2 Tasks
3 Applications to Safety Engineering
4 Conclusions
References
Continuous Development and Safety Assurance Pipeline for ML-Based Systems in the Railway Domain
1 Introduction
2 Related Work
3 Safe MLOps Process for Railway
4 Continuous Development and Safety Assurance Pipeline
4.1 Data Quality Assurance
4.2 ML Model Development
4.3 Safety Case Management
5 Case Study
6 Conclusion and Future Work
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken