Safety and Security in Cyber-Physical Systems and Internet-of-Things Systems
Abstract
Safety and security have traditionally been distinct problems in engineering and computer science. The introduction of computing elements to create cyber-physical systems (CPSs) has opened up a vast new range of potential problems that do not always show up on the radar of traditional engineers. Security, in contrast, is traditionally viewed as a data or communications security problem to be handled by computer scientists and/or computer engineers. Advances in CPSs and the Internet-of-Things (IoT) requires us to take a unified view of safety and security. This paper defines a safety/security threat model for CPSs and IoT systems and surveys emerging techniques which improve the safety and security of CPSs and IoT systems.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Cybersecurity breaches in Industry 4.0 would involve critical impacts on the business model and loss of competitiveness.
“Despite the improvement brought by Industry 4.0 in manufacturing factory efficiency, cybersecurity breaches would involve critical impacts on the business model and loss of competitiveness [5].”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [5]
According to [31], these systems should be designed and operated under a unified view of safety and security characteristics.
“According to [31], these systems should be designed and operated under a unified view of safety and security characteristics.”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [31]
Cites
The Constrained Application Protocol (CoAP)
Shelby, Z., Hartke, K., & Bormann, C. (2014) · doi:10.17487/rfc7252 · Cited by 2,605 · see citing works
False data injection attacks against state estimation in electric power grids
Liu, Y., Ning, P., & Reiter, M. K. (2011) · ACM Transactions on Information and System Security · doi:10.1145/1952982.1952995 · Cited by 2,469 · see citing works
A Summary Review of Wireless Sensors and Sensor Networks for Structural Health Monitoring
Lynch, J. P. (2006) · The Shock and Vibration Digest · doi:10.1177/0583102406061499 · Cited by 1,535 · see citing works
A Survey of Hardware Trojan Taxonomy and Detection
Tehranipoor, M., & Koushanfar, F. (2010) · IEEE Design & Test of Computers · doi:10.1109/mdt.2010.7 · Cited by 1,424 · see citing works
(2011) · Cited by 1,423 · see citing works
A survey of intrusion detection techniques for cyber-physical systems
Mitchell, R., & Chen, I.-R. (2014) · ACM Computing Surveys · doi:10.1145/2542049 · Cited by 768 · see citing works
Attacks against process control systems: risk assessment, detection, and response
Cárdenas, A. A., Amin, S., Lin, Z.-S., Huang, Y.-L., Huang, C.-Y., & Sastry, S. (2011) · Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security · doi:10.1145/1966913.1966959 · Cited by 699 · see citing works
Challenges in autonomous vehicle testing and validation
Koopman, P., & Wagner, M. (2016) · SAE International Journal of Transportation Safety · doi:10.4271/2016-01-0128 · Cited by 675 · see citing works
Hardware Trojan detection using path delay fingerprint
Jin, Y., & Makris, Y. (2008) · doi:10.1109/hst.2008.4559049 · Cited by 645 · see citing works
Vulnerability Assessment of AC State Estimation With Respect to False Data Injection Cyber-Attacks
Hug, G., & Giampapa, J. A. (2012) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2012.2195338 · Cited by 595 · see citing works
Godefroid, P., Levin, M. Y., & Molnár, D. (2012) · Communications of the ACM · doi:10.1145/2093548.2093564 · Cited by 572 · see citing works
Trustworthy Hardware: Identifying and Classifying Hardware Trojans
Karri, R., Rajendran, J., Rosenfeld, K., et al. (2010) · Computer · doi:10.1109/mc.2010.299 · Cited by 532 · see citing works
Cyber security analysis of state estimators in electric power systems
Teixeira, A. M. H., Amin, S., Sandberg, H., Johansson, K. H., & Sastry, S. (2010) · IEEE Conference on Decision and Control (CDC) · doi:10.1109/cdc.2010.5717318 · Cited by 411 · see citing works
False data injection attacks with incomplete information against smart power grids
Rahman, M. A., & Mohsenian‐Rad, H. (2012) · Globecom · doi:10.1109/glocom.2012.6503599 · Cited by 323 · see citing works
Using Model-based Intrusion Detection for SCADA Networks
Cheung, S. W., Dutertre, B., Fong, M. W., Lindqvist, U., Skinner, K., & Valdes, A. (2006) · Cited by 321 · see citing works
Model-Based Diagnosis of Hybrid Systems
Narasimhan, S., & Biswas, G. (2007) · IEEE Transactions on Systems Man and Cybernetics - Part A Systems and Humans · doi:10.1109/tsmca.2007.893487 · Cited by 297 · see citing works
Fuzzing for Software Security Testing and Quality Assurance
Takanen, A., DeMott, J. D., & Miller, C. (2008) · Cited by 289 · see citing works
(2004) · Elsevier eBooks · doi:10.1016/b978-1-931836-04-3.x5000-0 · Cited by 188 · see citing works
Who's in Control of Your Control System? Device Fingerprinting for Cyber-Physical Systems
Formby, D., Srinivasan, P., Leonard, A., et al. (2016) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2016.23142 · Cited by 171 · see citing works
Sensitivity analysis to hardware Trojans using power supply transient signals
Rad, R. M. P., Plusquellic, J., & Tehranipoor, M. (2008) · doi:10.1109/hst.2008.4559037 · Cited by 161 · see citing works
New design strategy for improving hardware Trojan detection and reducing Trojan activation time
Salmani, H., Tehranipoor, M., & Plusquellic, J. (2009) · doi:10.1109/hst.2009.5224968 · Cited by 134 · see citing works
Power supply signal calibration techniques for improving detection resolution to hardware Trojans
Rad, R. M. P., Wang, X., Tehranipoor, M., et al. (2008) · International Conference on Computer Aided Design · doi:10.5555/1509456.1509596 · Cited by 131 · see citing works
A language for automatically enforcing privacy policies
Yang, J. Y. H., Yessenov, K., & Solar-Lezama, A. (2012) · ACM SIGPLAN Notices · doi:10.1145/2103621.2103669 · Cited by 126 · see citing works
Power supply signal calibration techniques for improving detection resolution to hardware Trojans
Rad, R. M. P., Wang, X., Tehranipoor, M., et al. (2008) · doi:10.1109/iccad.2008.4681643 · Cited by 123 · see citing works
Temperature tracking: An innovative run-time approach for hardware Trojan detection
Forte, D. J., Bao, C., & Srivastava, A. (2013) · doi:10.1109/iccad.2013.6691167 · Cited by 112 · see citing works
A Clock Sweeping Technique for Detecting Hardware Trojans Impacting Circuits Delay
Xiao, K., Zhang, X., & Tehranipoor, M. (2013) · IEEE Design and Test · doi:10.1109/mdat.2013.2249555 · Cited by 101 · see citing works
Consistency-based characterization for IC Trojan detection
Alkabani, Y., & Koushanfar, F. (2009) · doi:10.1145/1687399.1687426 · Cited by 97 · see citing works
Daigle, M. J., Roychoudhury, I., Biswas, G., et al. (2010) · IEEE Transactions on Systems Man and Cybernetics - Part A Systems and Humans · doi:10.1109/tsmca.2010.2052038 · Cited by 96 · see citing works
A Modbus/TCP Fuzzer for testing internetworked industrial systems
Voyiatzis, A. G., Katsigiannis, K., & Koubias, S. (2015) · IEEE Conference on Emerging Technologies & Factory Automation (ETFA) · doi:10.1109/etfa.2015.7301400 · Cited by 85 · see citing works
Temperature Tracking: An Innovative Run-Time Approach for Hardware Trojan Detection
Forte, D. J., Bao, C., Srivastava, A., et al. (2013) · Cited by 81 · see citing works
Security Against Hardware Trojan Attacks Using Key-Based Design Obfuscation
Chakraborty, R. S., & Bhunia, S. (2011) · Journal of Electronic Testing · doi:10.1007/s10836-011-5255-2 · Cited by 77 · see citing works
Fuzzing CAN Packets into Automobiles
Lee, H., Choi, K., Chung, K., Kim, J., & Yim, K. (2015) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2015.274 · Cited by 75 · see citing works
A language for automatically enforcing privacy policies
Yang, J., Yessenov, K., & Solar-Lezama, A. (2012) · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL) · doi:10.1145/2103656.2103669 · Cited by 74 · see citing works
Runtime verification and monitoring of embedded systems
Watterson, C., & Heffernan, D. (2007) · IET Software · doi:10.1049/iet-sen:20060076 · Cited by 67 · see citing works
A standby-sparing technique with low energy-overhead for fault-tolerant hard real-time systems
Ejlali, A., Al‐Hashimi, B. M., & Eles, P. (2009) · IEEE/ACM International Conference on Hardware/Software Codesign and System Synthesis (CODES+ISSS) · doi:10.1145/1629435.1629463 · Cited by 61 · see citing works
Golden-Free Hardware Trojan Detection with High Sensitivity Under Process Noise
Hoque, T., Narasimhan, S., Wang, X., et al. (2016) · Journal of Electronic Testing · doi:10.1007/s10836-016-5632-y · Cited by 59 · see citing works
Cyber Security at Civil Nuclear Facilities: Understanding the Risks
Livingstone, D. W., Baylon, C., & Brunt, R. (2016) · Cited by 55 · see citing works
Security challenges in embedded systems
Serpanos, D. N., & Voyiatzis, A. G. (2013) · ACM Transactions on Embedded Computing Systems · doi:10.1145/2435227.2435262 · Cited by 49 · see citing works
Self-citationExciting FPGA cryptographic Trojans using combinatorial testing
Kitsos, P., Simos, D. E., Torres-Jiménez, J., et al. (2015) · IEEE International Symposium on Software Reliability Engineering (ISSRE) · doi:10.1109/issre.2015.7381800 · Cited by 49 · see citing works
Hardware Trojan Detection by Delay and Electromagnetic Measurements
Ngo, X.-T., Exurville, I., Bhasin, S., et al. (2015) · Design, Automation, and Test in Europe · doi:10.7873/date.2015.1103 · Cited by 45 · see citing works
Development of an extensible dual-core wireless sensing node for cyber-physical systems
Kane, M. B., Zhu, D., Hirose, M., et al. (2014) · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE · doi:10.1117/12.2045325 · Cited by 43 · see citing works
Monitor Based Oracles for Cyber-Physical System Testing: Practical Experience Report
Kane, A., Fuhrman, T. E., & Koopman, P. J. (2014) · IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) · doi:10.1109/dsn.2014.28 · Cited by 41 · see citing works
IT vs. OT Security: A Time to Consider a Change in CIA to Include Resilienc
Conklin, W. A. (2016) · Proceedings of the ... Annual Hawaii International Conference on System Sciences/Proceedings of the Annual Hawaii International Conference on System Sciences · doi:10.1109/hicss.2016.331 · Cited by 41 · see citing works
System safety as an emergent property in composite systems
Black, J., & Koopman, P. J. (2009) · IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) · doi:10.1109/dsn.2009.5270316 · Cited by 32 · see citing works
Design tool chain for cyber-physical systems
Sztipanovits, J., Bapty, T., Neema, S. K., et al. (2015) · Proceedings - ACM IEEE Design Automation Conference · doi:10.1145/2744769.2747922 · Cited by 26 · see citing works
Safety-critical medical device development using the UPP2SF model translation tool
Pajić, M., Jiang, Z., Lee, I., et al. (2014) · ACM Transactions on Embedded Computing Systems · doi:10.1145/2584651 · Cited by 26 · see citing works
Grammar-based adaptive fuzzing: Evaluation on SCADA modbus protocol
Hyunguk, Y., & Shon, T. (2016) · IEEE International Conference on Smart Grid Communications (SmartGridComm) · doi:10.1109/smartgridcomm.2016.7778820 · Cited by 25 · see citing works
Better Embedded System Software
Koopman, P. J. (2021) · CERN Document Server (European Organization for Nuclear Research) · Cited by 25 · see citing works
A formal model for verifying stealthy attacks on state estimation in power grids
Rahman, M. A., Al-Shaer, E. S., & Rahman, M. A. (2013) · IEEE International Conference on Smart Grid Communications (SmartGridComm) · doi:10.1109/smartgridcomm.2013.6687993 · Cited by 22 · see citing works
Detecting Malicious Logic Through Structural Checking
Smith, S. C., & Di, J. (2007) · doi:10.1109/tpsd.2007.4380384 · Cited by 22 · see citing works
Instrumentation and Modeling of I-35W St. Anthony Falls Bridge
Hedegaard, B. D., French, C. W., Shield, C. K., et al. (2012) · Journal of Bridge Engineering · doi:10.1061/(asce)be.1943-5592.0000384 · Cited by 21 · see citing works
Symbolic voter placement for dependability-aware system synthesis
Reimann, F., Glaß, M., Lukasiewycz, M., et al. (2008) · IEEE/ACM/IFIP International Conference on Hardware/Software Codesign and System Synthesis (CODES+ISSS) · doi:10.1145/1450135.1450190 · Cited by 20 · see citing works
A Novel Fuzzing Method for Zigbee Based on Finite State Machine
Cui, B., Liang, S., Chen, S., et al. (2014) · International Journal of Distributed Sensor Networks · doi:10.1155/2014/762891 · Cited by 19 · see citing works
Towards a hardware Trojan detection methodology
Kitsos, P., & Voyiatzis, A. G. (2014) · Mediterranean Conference on Embedded Computing (MECO) · doi:10.1109/meco.2014.6862687 · Cited by 19 · see citing works
Gao, S., Xie, L., Solar-Lezama, A., et al. (2015) · Proceedings of the IEEE Conference on Decision & Control, including the Symposium on Adaptive Processes · doi:10.1109/cdc.2015.7402610 · Cited by 17 · see citing works
Computational Vulnerability Analysis for Information Survivability
Shrobe, H. E. (2002) · doi:10.1609/aimag.v23i4.1671 · Cited by 14 · see citing works
Tariq, M. U., Florence, J., & Wolf, M. (2017) · Proceedings of the IEEE · doi:10.1109/jproc.2017.2744645 · Cited by 14 · see citing works
Self-citationAutocoding control software with proofs I: Annotation translation
Jobredeaux, R., Wang, T. E., & Féron, É. (2011) · IEEE/AIAA Digital Avionics Systems Conference (DASC) · doi:10.1109/dasc.2011.6096122 · Cited by 13 · see citing works
Chlipala, A. J. (2016) · Communications of the ACM · doi:10.1145/2958736 · Cited by 13 · see citing works
Wolf, M. C. (2016) · Computer · doi:10.1109/mc.2016.18 · Cited by 12 · see citing works
Self-citationComputational vulnerability analysis for information survivability
Shrobe, H. E. (2002) · National Conference on Artificial Intelligence · doi:10.5555/777092.777231 · Cited by 11 · see citing works
Practical measurements of data path delays for IP authentication & integrity verification
Exurville, I., Fournier, J., Dutertre, J.-M., et al. (2013) · doi:10.1109/recosoc.2013.6581551 · Cited by 11 · see citing works
Peach Improvement on Profinet-DCP for Industrial Control System Vulnerability Detection
Zhang, D., Wang, J., & Zhang, H. (2015) · Advances in computer science research · doi:10.2991/icecee-15.2015.305 · Cited by 10 · see citing works
Transportation CPS Safety Challenges
Koopman, P. J., & Wagner, M. (2018) · Figshare · doi:10.1184/r1/6469496 · Cited by 9 · see citing works
Towards Assurance for Plug & Play Medical Systems
King, A., Feng, L., Procter, S., et al. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-24255-2_17 · Cited by 7 · see citing works
IoT Components for Secure Smart Building Environments
Koulamas, C., Giannoulis, S., & Fournaris, A. P. (2016) · Springer eBooks · doi:10.1007/978-3-319-42304-3_17 · Cited by 7 · see citing works
A Hybrid Approach to Causality Analysis
Wang, S., Geoffroy, Y., Gößler, G., et al. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-23820-3_16 · Cited by 6 · see citing works
Black, J., & Koopman, P. J. (2008) · IEEE Pacific Rim International Symposium on Dependable Computing (PRDC) · doi:10.1109/prdc.2008.29 · Cited by 3 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Latif, S. A., Wen, F. B. X., Iwendi, C., Wang, L.-L. F., Mohsin, S. M., Han, Z., & Band, S. S. (2022) · Computer Communications · doi:10.1016/j.comcom.2021.09.029 · Cited by 224 · see citing works
A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0
Mullet, V., Sondi, P., & Ramat, E. (2021) · IEEE Access · doi:10.1109/access.2021.3056650 · Cited by 161 · see citing works
“According to [31], these systems should be designed and operated under a unified view of safety and security characteristics.”
BackgroundKrishnaveni, S., Chen, T. M., Sathiyanarayanan, M., & Amutha, B. (2024) · Cluster Computing · doi:10.1007/s10586-024-04320-x · Cited by 44 · see citing works
- Authors
- Wolf, M., & Serpanos, D.
- Affiliations
- Georgia Institute of Technology (US)
- University of Patras (GR)
- Venue
- Proceedings of the IEEE
- Published
- 2018-01
- Volume
- 106
- Issue
- 1
- Pages
- 9-20
- ISSN
- 0018-9219 (ISSN-L)
- 1558-2256
- OpenAlex
- W2777754251
- Cited by
- 250
- References
- 69
- Citations by year
- 2026: 8 · 2025: 23 · 2024: 17 · 2023: 30 · 2022: 44 · 2021: 40 · 2020: 35 · 2019: 35 · 2018: 18
- FWCI
- 16.03
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Proceedings of the IEEE (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Engineering › Safety, Risk, Reliability and Quality › Safety Systems Engineering in Autonomy
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Keywords
- cyber-physical systems, Internet of Things, safety, security (computing), security threats, safety techniques
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
