Automating an Integrated Model-Driven Approach to Analysing the Impact of Cyberattacks on Safety

Nowadays safety-critical systems extensively rely on networking technologies to implement various monitoring and control functions. Therefore, system safety and security become intertwined, i.e. cyberattacks might result in a violation of safety requirements. To enable a holistic analysis of the impact of cyberattacks on safety, we propose an automated integrated approach that facilitates the analysis of safety-security interactions using SysML and Event-B. Our modelling guidelines support an explicit representation of system behaviour during a cyber-attack in SysML. A translation and subsequent refinement in Event-B enable the discovery of violated safety requirements via formal proof-based verification. In this paper, we focus on discussing the developed automated tool support – EBSysMLSec that enables a holistic model-based analysis of safety-security interactions.