{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,15]],"date-time":"2024-09-15T14:09:52Z","timestamp":1726409392059},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319659473"},{"type":"electronic","value":"9783319659480"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-65948-0_7","type":"book-chapter","created":{"date-parts":[[2017,8,10]],"date-time":"2017-08-10T02:33:00Z","timestamp":1502332380000},"page":"96-114","source":"Crossref","is-referenced-by-count":16,"title":["Co-engineering Safety and Security in Industrial Control Systems: A Formal Outlook"],"prefix":"10.1007","author":[{"given":"Inna","family":"Vistbakka","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Elena","family":"Troubitsyna","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tuomas","family":"Kuismin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Timo","family":"Latvala","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,8,11]]},"reference":[{"key":"7_CR1","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9781139195881","volume-title":"Modeling in Event-B","author":"JR Abrial","year":"2010","unstructured":"Abrial, J.R.: Modeling in Event-B. Cambridge University Press, New York (2010)"},{"key":"7_CR2","series-title":"Lecture Notes in Computer Science","volume-title":"Rigorous Development of Complex Fault-Tolerant Systems","year":"2006","unstructured":"Butler, M., Jones, C.B., Romanovsky, A., Troubitsyna, E. (eds.): Rigorous Development of Complex Fault-Tolerant Systems. LNCS, vol. 4157. Springer, Heidelberg (2006)"},{"key":"7_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"264","DOI":"10.1007\/978-3-319-24249-1_23","volume-title":"Computer Safety, Reliability, and Security","author":"A Cimatti","year":"2015","unstructured":"Cimatti, A., DeLong, R., Marcantonio, D., Tonetta, S.: Combining MILS with contract-based design for safety and security requirements. In: Koornneef, F., Gulijk, C. (eds.) SAFECOMP 2015. LNCS, vol. 9338, pp. 264\u2013276. Springer, Cham (2015). doi: 10.1007\/978-3-319-24249-1_23"},{"issue":"9","key":"7_CR4","doi-asserted-by":"crossref","first-page":"1394","DOI":"10.1016\/j.ress.2009.02.020","volume":"94","author":"IN Fovino","year":"2009","unstructured":"Fovino, I.N., Masera, M., Cian, A.D.: Integrating cyber attacks within fault trees. Rel. Eng. Sys. Safety 94(9), 1394\u20131402 (2009)","journal-title":"Rel. Eng. Sys. Safety"},{"key":"7_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"174","DOI":"10.1007\/978-3-642-11811-1_14","volume-title":"Abstract State Machines, Alloy, B and Z","author":"A Iliasov","year":"2010","unstructured":"Iliasov, A., Troubitsyna, E., Laibinis, L., Romanovsky, A., Varpaaniemi, K., Ilic, D., Latvala, T.: Supporting reuse in Event-B development: modularisation approach. In: Frappier, M., Gl\u00e4sser, U., Khurshid, S., Laleau, R., Reeves, S. (eds.) ABZ 2010. LNCS, vol. 5977, pp. 174\u2013188. Springer, Heidelberg (2010). doi: 10.1007\/978-3-642-11811-1_14"},{"key":"7_CR6","doi-asserted-by":"crossref","unstructured":"Iliasov, A., Romanovsky, A., Laibinis, L., Troubitsyna, E., Latvala, T.: Augmenting Event-B modelling with real-time verification. In: Proceedings of the FormSERA 2012, pp. 51\u201357. IEEE (2012)","DOI":"10.1109\/FormSERA.2012.6229789"},{"key":"7_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1007\/978-3-642-17071-3_4","volume-title":"Formal Methods for Components and Objects","author":"A Iliasov","year":"2010","unstructured":"Iliasov, A., Troubitsyna, E., Laibinis, L., Romanovsky, A.: Patterns for refinement automation. In: Boer, F.S., Bonsangue, M.M., Hallerstede, S., Leuschel, M. (eds.) FMCO 2009. LNCS, vol. 6286, pp. 70\u201388. Springer, Heidelberg (2010). doi: 10.1007\/978-3-642-17071-3_4"},{"issue":"7","key":"7_CR8","doi-asserted-by":"crossref","first-page":"884","DOI":"10.1016\/j.scico.2012.04.010","volume":"78","author":"A Iliasov","year":"2013","unstructured":"Iliasov, A., Troubitsyna, E., Laibinis, L., Romanovsky, A., Varpaaniemi, K., Ilic, D., Latvala, T.: Developing mode-rich satellite software by refinement in event-B. Sci. Comput. Program. 78(7), 884\u2013905 (2013)","journal-title":"Sci. Comput. Program."},{"key":"7_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"126","DOI":"10.1007\/978-3-642-15651-9_10","volume-title":"Computer Safety, Reliability, and Security","author":"A Iliasov","year":"2010","unstructured":"Iliasov, A., Troubitsyna, E., Laibinis, L., Romanovsky, A., Varpaaniemi, K., V\u00e4is\u00e4nen, P., Ilic, D., Latvala, T.: Verifying mode consistency for on-board satellite software. In: Schoitsch, E. (ed.) SAFECOMP 2010. LNCS, vol. 6351, pp. 126\u2013141. Springer, Heidelberg (2010). doi: 10.1007\/978-3-642-15651-9_10"},{"key":"7_CR10","unstructured":"Sere, K., Troubitsyna, E.A.: Probabilities in action systems. In: Proceedings of the 8th Nordic Workshop on Programming Theory, pp. 373\u2013387 (1996)"},{"key":"7_CR11","unstructured":"Kelly, T.P., Weaver, R.A.: The goal structuring notation - a safety argument notation. In: DSN 2004, Workshop on Assurance Cases (2004)"},{"key":"7_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"326","DOI":"10.1007\/978-3-319-10506-2_22","volume-title":"Computer Safety, Reliability, and Security","author":"S Kriaa","year":"2014","unstructured":"Kriaa, S., Bouissou, M., Colin, F., Halgand, Y., Pietre-Cambacedes, L.: Safety and security interactions modeling using the BDMP formalism: case study of a pipeline. In: Bondavalli, A., Di Giandomenico, F. (eds.) SAFECOMP 2014. LNCS, vol. 8666, pp. 326\u2013341. Springer, Cham (2014). doi: 10.1007\/978-3-319-10506-2_22"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"Laibinis, L., Troubitsyna, E.: Fault tolerance in a layered architecture: a general specification pattern in B. In: SEFM 2004, Beijing, China, pp. 346\u2013355. IEEE Computer Society (2004)","DOI":"10.1109\/SEFM.2004.1347539"},{"key":"7_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"254","DOI":"10.1007\/978-3-540-30138-7_22","volume-title":"Computer Safety, Reliability, and Security","author":"L Laibinis","year":"2004","unstructured":"Laibinis, L., Troubitsyna, E.: Refinement of fault tolerant control systems in B. In: Heisel, M., Liggesmeyer, P., Wittmann, S. (eds.) SAFECOMP 2004. LNCS, vol. 3219, pp. 254\u2013268. Springer, Heidelberg (2004). doi: 10.1007\/978-3-540-30138-7_22"},{"key":"7_CR15","unstructured":"Laibinis, L., Troubitsyna, E.: Fault tolerance in use-case modeling. In: Proceedings of RHAS 2005 (2005)"},{"key":"7_CR16","volume-title":"Safeware: System Safety and Computers","author":"NG Leveson","year":"1995","unstructured":"Leveson, N.G.: Safeware: System Safety and Computers. Addison-Wesley, Boston (1995)"},{"key":"7_CR17","doi-asserted-by":"crossref","unstructured":"Lopatkin, I., Iliasov, A., Romanovsky, A., Prokhorova, Y., Troubitsyna, E.: Patterns for representing FMEA in formal specification of control systems. In: HASE 2011, Boca Raton, FL, USA, pp. 146\u2013151. IEEE Computer Society (2011)","DOI":"10.1109\/HASE.2011.10"},{"key":"7_CR18","unstructured":"McIver, A., Morgan, C., Troubitsyna, E.: The probabilistic steam boiler: a case study in probabilistic data refinement. In: Proceedings of the International Refinement Workshop, Canberra, Australia, pp. 250\u2013265. Springer (1998)"},{"key":"7_CR19","doi-asserted-by":"crossref","first-page":"335","DOI":"10.2495\/SAFE150291","volume":"151","author":"S Paul","year":"2015","unstructured":"Paul, S., Rioux, L.: Over 20 years of research into cybersecurity and safety engineering: a short bibliography. Saf. Secur. Eng. VI 151, 335 (2015)","journal-title":"Saf. Secur. Eng. VI"},{"key":"7_CR20","doi-asserted-by":"crossref","unstructured":"Pereverzeva, I., Troubitsyna, E., Laibinis, L.: Formal development of critical multi-agent systems: a refinement approach. In: EDCC 2012, pp. 156\u2013161 (2012)","DOI":"10.1109\/EDCC.2012.24"},{"key":"7_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"334","DOI":"10.1007\/978-3-319-45480-1_27","volume-title":"Computer Safety, Reliability, and Security","author":"C Ponsard","year":"2016","unstructured":"Ponsard, C., Dallons, G., Massonet, P.: Goal-oriented co-engineering of security and safety requirements in cyber-physical systems. In: Skavhaug, A., Guiochet, J., Schoitsch, E., Bitsch, F. (eds.) SAFECOMP 2016. LNCS, vol. 9923, pp. 334\u2013345. Springer, Cham (2016). doi: 10.1007\/978-3-319-45480-1_27"},{"key":"7_CR22","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1016\/j.infsof.2015.01.001","volume":"60","author":"Y Prokhorova","year":"2015","unstructured":"Prokhorova, Y., Laibinis, L., Troubitsyna, E.: Facilitating construction of safety cases from formal models in Event-B. Inform. Softw. Technol. 60, 51\u201376 (2015)","journal-title":"Inform. Softw. Technol."},{"key":"7_CR23","unstructured":"Rodin: Event-B platform. http:\/\/www.event-b.org\/"},{"key":"7_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"195","DOI":"10.1007\/978-3-319-45480-1_16","volume-title":"Computer Safety, Reliability, and Security","author":"C Schmittner","year":"2016","unstructured":"Schmittner, C., Ma, Z., Puschner, P.: Limitation and improvement of STPA-Sec for safety and security co-analysis. In: Skavhaug, A., Guiochet, J., Schoitsch, E., Bitsch, F. (eds.) SAFECOMP 2016. LNCS, vol. 9923, pp. 195\u2013209. Springer, Cham (2016). doi: 10.1007\/978-3-319-45480-1_16"},{"key":"7_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"282","DOI":"10.1007\/978-3-319-10557-4_31","volume-title":"Computer Safety, Reliability, and Security","author":"C Schmittner","year":"2014","unstructured":"Schmittner, C., Ma, Z., Smith, P.: FMVEA for safety and security analysis of intelligent and cooperative vehicles. In: Bondavalli, A., Ceccarelli, A., Ortmeier, F. (eds.) SAFECOMP 2014. LNCS, vol. 8696, pp. 282\u2013288. Springer, Cham (2014). doi: 10.1007\/978-3-319-10557-4_31"},{"key":"7_CR26","doi-asserted-by":"crossref","unstructured":"Sere, K., Troubitsyna, E.: Hazard analysis in formal specification. In: Proceedings of the 18th International Conference, SAFECOMP 1999, pp. 350\u2013360 (1999)","DOI":"10.1007\/3-540-48249-0_30"},{"key":"7_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"210","DOI":"10.1007\/978-3-642-33678-2_18","volume-title":"Computer Safety, Reliability, and Security","author":"A Tarasyuk","year":"2012","unstructured":"Tarasyuk, A., Pereverzeva, I., Troubitsyna, E., Latvala, T., Nummila, L.: Formal development and assessment of a reconfigurable on-board satellite system. In: Ortmeier, F., Daniel, P. (eds.) SAFECOMP 2012. LNCS, vol. 7612, pp. 210\u2013222. Springer, Heidelberg (2012). doi: 10.1007\/978-3-642-33678-2_18"},{"key":"7_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1007\/978-3-642-24124-6_3","volume-title":"Software Engineering for Resilient Systems","author":"A Tarasyuk","year":"2011","unstructured":"Tarasyuk, A., Troubitsyna, E., Laibinis, L.: Quantitative verification of system safety in Event-B. In: Troubitsyna, E.A. (ed.) SERENE 2011. LNCS, vol. 6968, pp. 24\u201339. Springer, Heidelberg (2011). doi: 10.1007\/978-3-642-24124-6_3"},{"issue":"1","key":"7_CR29","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1007\/s00165-014-0305-z","volume":"27","author":"A Tarasyuk","year":"2015","unstructured":"Tarasyuk, A., Troubitsyna, E., Laibinis, L.: Integrating stochastic reasoning into Event-B development. Formal Asp. Comput. 27(1), 53\u201377 (2015)","journal-title":"Formal Asp. Comput."},{"key":"7_CR30","doi-asserted-by":"crossref","unstructured":"Troubitsyna, E.: Enhancing dependability via parameterized refinement. In: PRDC 1999, Hong Kong, p. 120. IEEE Computer Society (1999)","DOI":"10.1109\/PRDC.1999.816221"},{"key":"7_CR31","unstructured":"Troubitsyna, E.: Stepwise Development of Dependable Systems. Technical report (2000)"},{"key":"7_CR32","doi-asserted-by":"crossref","unstructured":"Troubitsyna, E.: Elicitation and specification of safety requirements. In: ICONS 2008, Cancun, Mexico, pp. 202\u2013207. IEEE Computer Society (2008)","DOI":"10.1109\/ICONS.2008.56"},{"key":"7_CR33","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"213","DOI":"10.1007\/978-3-319-45477-1_17","volume-title":"Computer Safety, Reliability, and Security","author":"E Troubitsyna","year":"2016","unstructured":"Troubitsyna, E., Laibinis, L., Pereverzeva, I., Kuismin, T., Ilic, D., Latvala, T.: Towards security-explicit formal modelling of safety-critical systems. In: Skavhaug, A., Guiochet, J., Bitsch, F. (eds.) SAFECOMP 2016. LNCS, vol. 9922, pp. 213\u2013225. Springer, Cham (2016). doi: 10.1007\/978-3-319-45477-1_17"},{"issue":"2","key":"7_CR34","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1145\/2556938","volume":"57","author":"W Young","year":"2014","unstructured":"Young, W., Leveson, N.G.: An integrated approach to safety and security based on systems theory. Commun. ACM 57(2), 31\u201335 (2014)","journal-title":"Commun. ACM"}],"container-title":["Lecture Notes in Computer Science","Software Engineering for Resilient Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-65948-0_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,2]],"date-time":"2019-10-02T06:37:34Z","timestamp":1569998254000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-65948-0_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319659473","9783319659480"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-65948-0_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2017]]}}}