Security Level Identification and Secure Software Design of Safety Critical Embedded Systems: Methodologies and Process

Abstract This paper is concerned with the process and technological aspects of Instrumentation & Control System, I&C System security and provides an overview of the recommended design practices and assessment methods for security aspects of control and instrumentation system used in Safety Critical Environments. This paper describes out how Security Levels of I&C systems and components of Safety Critical Facilities can be assigned by system designers. This is akin to Safety Integrity Level, SIL levels assigned for safety issues. It presents ideas about the three different security aspects viz Target Security Level, Achieved Security Level and Capability Security Level. The paper explains how it can be incorporated in the Life Cycle of an I&C System. It also factors the Physical Security issues, use of Wiring Harnesses. It then discusses the Security Level Vectors, the associated Foundational Requirements and the Security Lifecycle Program of an I&C System