Practical Internet of Things Security - Second Edition

Merging fault and attack tree analysis

Methods of merging attack tree analysis with FTA exist in the literature, but significant research and work remains to find new, efficient ways of performing combined tree analysis for CPS IoT. Processes are needed that help both safety and security engineers navigate a system's statistical failure modes in a manner cognizant of the different attack modalities that also may be present. One challenge is the potentially enormous state space that may ensue from the analysis and the difficulty of making the results useful and actionable for developing optimal mitigations.

With the challenges in mind, high safety and security assurances are achievable today with the following recommendations:

• Integrate FTA ...