The Relationship between Safety and Security in Software-based Systems
A workshop arranged by the Safety-Critical Systems Club in co-operation with the EWICS TC7 security subgroup. The workshop took place in Newcastle on September the 25th in connection with the Safecomp 2008 conference.
The fields of safety and security have developed differently, and largely independently, as the application of computer systems in many domains has itself developed over the past half-century or so. Safety has been concerned with computer misbehaviour, usually within systems that operate in a highly constrained environment; security has been focused on computer misuse, particularly where systems are networked and remotely accessible. But advances in networking technologies mean that safety and security can now both be significant for a single system, and should no longer be treated separately.
After morning presentations by leading experts in both safety and security, the afternoon was devoted to a workshop discussion giving all attendees the opportunity to debate issues raised by the speakers, and to raise concerns of their own.
The programme was:
Safety and Security, Two Sides of the Same Coin? by Robert Dewar, cofounder and CEO of Adacore, Emeritus professor of Computer Science, Courant Institute, New York University (US)
Some Security Aspects of Safety-Related Systems by Odd Nordland, Senior Research Scientist, SINTEF ICT, Dept of Software Engineering, Safety and Security, Trondheim (NO)
Common Analysis and Verification Techniques for Safety- and Security-Critical Software Systems by Francesca Saglietti, Professor of Software Engineering, University of Erlangen-Nuremberg (DE)
Changing Regulation in Safety and Security - Implications and Opportunities by Dave Jackson and Brian Dobbing, Praxis High Integrity Systems, Bath (UK)
Security in Safety Systems: the Need to Step beyond Traditional Engineering by Hans Daniel, (retired) formerly German Federal Office for Information Security, Bonn (DE)
The contributions are made available here with the kind permission of the respective authors.
For more information on the Safety-Critical Systems Club see www.scsc.org.uk