Simulation-Based Detection of Safety-Relevant Hardware Data Streams
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting security-relevant data streams in hardware systems are limited by the need for access to source code and are difficult to automate, especially in scenarios where hardware modifications are not feasible, such as in industrial automation and embedded systems.
Innovation Solution
A method that maps the hardware system onto a simulation model in a simulation environment, allowing the monitoring and logging of critical data streams without modifying the hardware, using simulators suitable for standard CPUs, and identifying security-relevant data streams through simulation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If static code analysis or model inspection is used to detect security vulnerabilities, then automation is possible, but detection effectiveness is limited and source code access is required
Solution Approach 1:
The patent creates a simulation model that copies the essential behavior and data flow characteristics of the target system without requiring access to its source code. This simulation model can be automatically analyzed while preserving the security-relevant properties of the original system, thus achieving both automation and effective detection.
Solution Approach 2:
The simulation model acts as an intermediary between the tester and the target system. It allows security analysis to be performed on a representation of the system rather than the system itself, enabling automation while maintaining detection effectiveness through accurate modeling of security-critical behaviors.
2Ease of manufacture
If source code access is required for security analysis, then static analysis can be performed, but confidentiality requirements cannot be met
Solution Approach 1:
Instead of analyzing the actual source code, the patent analyzes a simulation model that replicates the system's security-relevant behavior. This copying approach allows comprehensive security testing while the original confidential source code remains untouched and private.
Solution Approach 2:
The patent extracts only the security-critical aspects and behaviors from the target system to create the simulation model. This extraction allows security analysis to be performed on a simplified representation that does not contain the full confidential source code, thus protecting intellectual property while enabling thorough security testing.
3Difficulty of detecting and measuring
If hardware modifications are made to detect data streams, then monitoring capability is improved, but hardware changes become necessary
Solution Approach 1:
The patent creates a simulation model that copies the data flow characteristics of the hardware system, allowing monitoring and analysis of security-relevant data streams without physically modifying the hardware. The simulation model captures the essential behavior for security analysis while leaving the actual hardware unchanged.
Data Source
AI summary
A method for detecting safety-relevant data streams which occur in a hardware system during the execution of at least one data processing task. In one example embodiment, the method includes the steps of: defining critical data via an interface, mapping of the hardware system onto a simulation model capable of running in a simulation environment; executing the at least one data processing task as a simulation with the simulation model in the simulation environment, monitoring the creation, transmission and deletion of the critical data and instances of the critical data in the simulation model during the execution of the at least one data processing task, and identifying and logging the security-relevant data streams.