Systems Engineering for the Digital Age

Chapter 26The Cyber Security Requirements Methodology and Meta‐Model for Design of Cyber‐Resilience

Tim Sherburne¹, Megan M. Clifford², Barry M. Horowitz³, and Peter A. Beling¹

¹ Virginia Polytechnic Institute and State University, Hume Center for National Security and Technology, Blacksburg, VA, USA

² Stevens Institute of Technology, School for Systems and Enterprises, Hoboken, NJ, USA

³ University of Virginia, Charlottesville, VA, USA

Introduction and Background

This chapter continues the theme of the cluster, namely methods for achieving cyber resilience in cyber‐physical systems. Resilience may be defined as the ability of systems to resist, absorb, and recover from or adapt to an adverse occurrence during operation that may cause harm, destruction, or loss of ability to perform mission‐related functions. Cyber resilience aims to deal specifically with attacks that can arise through compromise of the cyber elements of a system. In most cases, resilience is a property that must be engineered into the system.

Mission Aware (MA), covered in detail in a previous chapter, is a reference architecture for operational resilience of cyber‐physical systems that was developed under prior SERC research efforts. As illustrated in Figure 26.1, the primary feature of the MA architecture is a sentinel that monitors the system or mission being protected, detects abnormal behavior or other signs of loss of function, alerts system users or mission owners to detected loss of function, and ...