{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T05:08:01Z","timestamp":1769836081185,"version":"3.49.0"},"reference-count":81,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"EPSRC Centre for Doctoral Training in High Performance Embedded and Distributed Systems HiPEDS","award":["EP\/L016796\/1"],"award-info":[{"award-number":["EP\/L016796\/1"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1109\/tdsc.2023.3309778","type":"journal-article","created":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T17:47:20Z","timestamp":1693331240000},"page":"2526-2540","source":"Crossref","is-referenced-by-count":8,"title":["Which Attacks Lead to Hazards? Combining Safety and Security Analysis for Cyber-Physical Systems"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4197-6937","authenticated-orcid":false,"given":"Luca Maria","family":"Castiglione","sequence":"first","affiliation":[{"name":"Department Computing, Imperial College London, London, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2844-3917","authenticated-orcid":false,"given":"Emil C.","family":"Lupu","sequence":"additional","affiliation":[{"name":"Department Computing, Imperial College London, London, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Hacker tries to poison water supply of florida city","year":"2021"},{"key":"ref2","article-title":"Anatomy of an attack: Detecting and defeating crashoverride originally presented at virusbulletin montreal","author":"Slowik","year":"2018"},{"key":"ref3","article-title":"Industroyer2. Industroyer reloaded","year":"2022"},{"key":"ref4","article-title":"\u2018cyberpartisans\u2019 hack belarusian railway to disrupt russian buildup","author":"Ross","year":"2022"},{"key":"ref5","article-title":"Drone crash in Iran reveals secret us surveillance effort","volume":"7","author":"Shane","year":"2011","journal-title":"New York Times"},{"key":"ref6","first-page":"1","article-title":"System-theoretic process analysis for security (STPA-SEC): Cyber security and STPA","volume-title":"Proc. STAMP Conf.","author":"Young"},{"key":"ref7","first-page":"1","article-title":"Experiences threat modeling at Microsoft","volume":"2008","author":"Shostack","year":"2008","journal-title":"MODSEC, MoDELS"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/c2014-0-04859-9"},{"key":"ref9","volume-title":"Failure Mode and Effect Analysis: FMEA From Theory to Execution","author":"Stamatis","year":"2003"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/RAMS.1998.653561"},{"key":"ref11","first-page":"1","article-title":"Fault tree analysis","volume-title":"Proc. Syst. Saf. Conf.","author":"Ericson"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-24230-9_9"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.7873\/DATE.2015.0622"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.3390\/systems9010018"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28891-3_13"},{"key":"ref16","article-title":"Common attack pattern enumeration and classification","year":"2023"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/VNC48660.2019.9062783"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ISGTEurope.2017.8260283"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-09234-3_9"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102316"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3451169"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10506-2_22"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2016.27"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2338"},{"key":"ref25","article-title":"Model-based safety and security co-analysis: A survey","author":"Kolb","year":"2021"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2012.09.011"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.compind.2021.103584"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.3182\/20130619-3-RU-3018.00392"},{"key":"ref29","first-page":"1","article-title":"IEC 62859: Towards an international standard on the coordination between safety and cybersecurity for nuclear I&C systems","volume-title":"Proc. 9th Int. Topical Meeting Nucl. Plant Instrum. Control Hum. Mach. Interface Technol.","author":"Pietre-Cambacedes"},{"key":"ref30","article-title":"Ed-203a - Airworthiness security methods and considerations","year":"2018"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2530277"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/8179.001.0001"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.ssci.2021.105566"},{"key":"ref34","article-title":"Cyber-safety analysis of an industrial control system for chillers using STPA-Sec","author":"Khan","year":"2018","journal-title":"MIT Sloan Res. Paper 5721-18"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00024-0_9"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2865736"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2016.05.008"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3093214"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102620"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm52983.2022.9961003"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2509994"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.2172\/1044959"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24255-2_10"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.proeng.2015.11.498"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.ssci.2018.05.009"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1977.32"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.2514\/1.I010602"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/8875872"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/QEST.2006.59"},{"key":"ref50","first-page":"201","article-title":"Finite-state analysis of SSL 3.0","volume-title":"Proc. 7th Conf. USENIX Secur. Symp.","author":"Mitchell"},{"key":"ref51","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2018.23313","article-title":"LTEInspector: A systematic approach for adversarial testing of 4G LTE","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","author":"Hussain"},{"key":"ref52","first-page":"3219","article-title":"Automated discovery of denial-of-service vulnerabilities in connected vehicle protocols","volume-title":"Proc. USENIX Secur. Symp.","author":"Hu"},{"key":"ref53","article-title":"Automatic discovery of evasion attacks against stateful firewalls (CMU-CyLab-21-001)","author":"Moon","year":"2021"},{"key":"ref54","article-title":"Use of formal methods at amazon web services","author":"Newcombe","year":"2014"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2019.8702440"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-83906-2_9"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/S0951-8320(98)00015-5"},{"issue":"4","key":"ref58","article-title":"Safety management requirements for defence systems, Part 1: Requirements","year":"2007"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2432631.2432635"},{"key":"ref60","first-page":"1","article-title":"STPA Handbook","author":"Leveson","year":"2018"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3411498.3419967"},{"issue":"1","key":"ref63","first-page":"2003","article-title":"Introduction to network RTK","volume":"4","author":"Wanninger","year":"2004","journal-title":"IAG Work. Group"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2020.3032652"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68499-4_10"},{"key":"ref66","article-title":"A systematic and semi-automatic safety-based test case generation approach based on systems-theoretic process analysis","author":"Abdulkhaleq","year":"2016"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45319-9_1"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/LICS.1990.113766"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30080-9_7"},{"key":"ref71","first-page":"2005","article-title":"Real time is really simple","author":"Lamport","year":"2005"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2012.6263942"},{"key":"ref73","volume-title":"Threat Modeling: Designing for Security","author":"Shostack","year":"2014"},{"key":"ref74","article-title":"A threat-driven approach to cyber security","author":"Muckin","year":"2019"},{"key":"ref75","article-title":"Defenders think in lists. Attackers think in graphs. As long as this is true, attackers win","author":"Lambert","year":"2015"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586140"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180446"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.2307\/2268661"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1147\/rd.62.0200"},{"key":"ref80","first-page":"113","article-title":"MulVAL: A logic-based network security analyzer","volume-title":"Proc. USENIX Secur. Symp.","author":"Ou"},{"key":"ref81","article-title":"Raspberry pi used to steal data from nasa lab","year":"2019"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3381449"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10592103\/10234131.pdf?arnumber=10234131","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,18]],"date-time":"2024-07-18T06:10:35Z","timestamp":1721283035000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10234131\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":81,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2023.3309778","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,7]]}}}