FASSSTeR: A Novel Framework Aligned with ISA and ISO Standards for Cyber Physical System Safety, Security, Sustainability and Resiliency
Abstract
Cyber Physical Systems (CPS) plays an important role in industry 4.0 applications such as smart factory, smart energy, smart transportation, and smart cities. The Supervisory Control And Data Acquisition (SCADA) systems are typically used in Industry environment for CPS. They are industrial control systems (ICS) used in many critical infrastructures such as smart-power grid, refining, as well as infrastructure e.g. water management, oil & gas pipelines, and wind farms.There are five key properties of the Cyber-Physical System (CPS) namely: Design thinking, safety, security, sustainability and resiliency[12] [13].These properties share a common goal – Monitor behaviour of the CPS system and protect them from failure. In order to achieve this goal, it is critical to align the processes and activities of the CPS system to utilize the perspective of design thinking, safety, security sustainability and resiliency. In this research work, we propose a novel framework for CPS system that is motivated from International standards such as ISA (International Society of Automation) 99, ISO (the International Organization for Standardization) 27001, ISO 27002 and Physical and environmental security. The proposed framework aids CPS design, security and safety at early development phases by aligning processes based on ISA-99, ISO 27001, and ISO27002 standards. The framework, Fault-Attack-Safety- Security-Sustainability-Resiliency Tree (FASSSTeR) includes fault trees, attack trees, safety countermeasures, security countermeasures, sustainability and Resiliency measures. The proposed framework can be used during design, development and operation phases for periodic assessment, monitoring and verification of safety and security of CPS system.