scholarly journals A DEVELOPMENT FRAMEWORK FOR SOFTWARE SECURITY IN NUCLEAR SAFETY SYSTEMS: INTEGRATING SECURE DEVELOPMENT AND SYSTEM SECURITY ACTIVITIES

2014 ◽  
Vol 46 (1) ◽  
pp. 47-54 ◽  
Author(s):  
JAEKWAN PARK ◽  
YONGSUK SUH
Author(s):  
I-HSIN CHOU ◽  
CHIN-FENG FAN

As computers are used in nuclear safety systems, security engineering is becoming more and more important in the nuclear industry. Like all highly technical endeavours, the development of nuclear safety systems is a knowledge intensive task. Unfortunately, not only do nuclear scientists and software engineers lack the security knowledge, they are also not familiar with the new security requirements. Besides, few young people are studying nuclear science, nuclear engineering and related fields. Therefore, knowledge management can play a central role in encapsulating, storing and spreading the related discipline and knowledge more efficiently in the nuclear industry. In this paper, we propose a security knowledge framework to gather and store security knowledge from those regulatory-based security activities. We adopt an object-oriented paradigm which is easy for software engineers to understand and to express tacit and explicit knowledge. Its aim is intended to decouple between platform-independent security knowledge and platform-specific security controls. Finally, an example is presented to demonstrate the feasibility of linking between security controls and knowledge ontology in our framework.


Software security testing is essential to reveal the weaknesses in the security of the system. The security level of the software must be assessed properly and timely so that the security breaches can be prevented to occur otherwise they harm the system. Security testing during designing the software will be advantageous to reduce the rework and expenses required if it will be found insecure after the implementation. Security testing can be achieved efficiently through proper framework at the early stages of software development. Security can be checked at the initial level by taking inputs at the requirement phase and design phase so that loopholes can be found and the propagation of vulnerabilities can be prevented. At requirement phase security requirements can be filtered and then at the next phase designing artifacts can be inspected for security errors. A metric is designed which will grade the software under test and state that whether the system is secured at the proper level or not. In this paper a framework is proposed which is based on metric and the validation of the metric is done through the Weyuker’s property.


1977 ◽  
Vol R-26 (4) ◽  
pp. 257-260 ◽  
Author(s):  
W.E. Vesely ◽  
F.F. Goldberg

Author(s):  
Lenka Maléřová ◽  
Vilém Adamec ◽  
Romeu Da Silva Vicente ◽  
Jakub Brumar

Abstract Crisis preparedness of territorial units, as well as individual elements of their safety systems, can be verified in different ways. In the Czech Republic screening exercises are often used for these purposes. Testing exercises should take place in conditions as similar as possible to the real case scenarios. However, this is often not possible for different reasons (e.g. considerable costs associated to practicing actions). One option is the use of stress tests that are presently used (e.g. nuclear safety). The aim of this article is to highlight and discuss this issue and outline the possible approach to reliable solution.


Sign in / Sign up

Export Citation Format

Share Document