Extending Attack-Fault Trees with Runtime Verification



Cardoso, Rafael C, Ferrando, Angelo and Fisher, Michael
(2022) Extending Attack-Fault Trees with Runtime Verification. .

Access the full-text of this item by clicking on the Open Access link.

Abstract

Autonomous systems are often complex and prone to software failures and cyber-attacks. We introduce RVAFTs, an extension of Attack-Fault Trees (AFTs) with runtime events that can be used to construct runtime monitors. These monitors are able to detect when failures, that can be caused either by an attack or by a fault, occur. The safety and security properties monitored are, in turn, derived from the hierarchical decomposition of RVAFTs. Our approach not only provides further use of AFTs, but also improves the process of instrumentation often required in runtime verification. We explain the principles and provide a simple case study demonstrating how RVAFTs can be used in practice. Through this we are also able to evaluate the detection of faults and attacks as well as assessing the computational overhead of the monitors.

Item Type: Conference or Workshop Item (Unspecified)
Divisions: Faculty of Science and Engineering > School of Electrical Engineering, Electronics and Computer Science
Depositing User: Symplectic Admin
Date Deposited: 02 Mar 2023 09:02
Last Modified: 20 Sep 2023 22:12
DOI: 10.4204/EPTCS.371.14
Open Access URL: https://doi.org/10.48550/arXiv.2209.14044
Related URLs:
URI: https://livrepository.liverpool.ac.uk/id/eprint/3168676