{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T21:41:07Z","timestamp":1791409267596,"version":"4.3.3"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,4,14]],"date-time":"2015-04-14T00:00:00Z","timestamp":1428969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EU ARTEMIS EMC2","award":["621429"],"award-info":[{"award-number":["621429"]}]},{"name":"Austrian Research Promotion Agency (FFG)"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,4,14]]},"DOI":"10.1145\/2732198.2732204","type":"proceedings-article","created":{"date-parts":[[2015,4,3]],"date-time":"2015-04-03T12:27:14Z","timestamp":1428064034000},"page":"69-80","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":61,"title":["A Case Study of FMVEA and CHASSIS as Safety and Security Co-Analysis Method for Automotive Cyber-physical Systems"],"prefix":"10.1145","author":[{"given":"Christoph","family":"Schmittner","sequence":"first","affiliation":[{"name":"Austrian Institute of Technology, Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhendong","family":"Ma","sequence":"additional","affiliation":[{"name":"Austrian Institute of Technology, Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Erwin","family":"Schoitsch","sequence":"additional","affiliation":[{"name":"Austrian Institute of Technology, Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas","family":"Gruber","sequence":"additional","affiliation":[{"name":"Austrian Institute of Technology, Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,4,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Automation & Test in Europe Conference & Exhibition (DATE)","author":"Abelein U.","year":"2012","unstructured":"U. Abelein , H. Lochner , D. Hahn , and S. Straube , \" Complexity, quality and robustness - the challenges of tomorrow's automotive electronics,\" in Design , Automation & Test in Europe Conference & Exhibition (DATE) , 2012 . U. Abelein, H. Lochner, D. Hahn, and S. Straube, \"Complexity, quality and robustness - the challenges of tomorrow's automotive electronics,\" in Design, Automation & Test in Europe Conference & Exhibition (DATE), 2012."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2011.2165689"},{"key":"e_1_3_2_1_3_1","first-page":"180","volume-title":"Towards trust assurance and certification in cyber-physical systems,\" in Computer Safety, Reliability, and Security","author":"Schneider D.","year":"2014","unstructured":"D. Schneider , E. Armengaud , and E. Schoitsch , \" Towards trust assurance and certification in cyber-physical systems,\" in Computer Safety, Reliability, and Security , pp. 180 -- 191 , Springer , 2014 . D. Schneider, E. Armengaud, and E. Schoitsch, \"Towards trust assurance and certification in cyber-physical systems,\" in Computer Safety, Reliability, and Security, pp. 180--191, Springer, 2014."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10506-2_21"},{"key":"e_1_3_2_1_5_1","volume-title":"FMVEA for safety and security analysis of intelligent and cooperative vehicles,\" in Computer Safety, Reliability, and Security","author":"Schmittner C.","year":"2014","unstructured":"C. Schmittner , Z. Ma , and P. Smith , \" FMVEA for safety and security analysis of intelligent and cooperative vehicles,\" in Computer Safety, Reliability, and Security , 2014 . C. Schmittner, Z. Ma, and P. Smith, \"FMVEA for safety and security analysis of intelligent and cooperative vehicles,\" in Computer Safety, Reliability, and Security, 2014."},{"key":"e_1_3_2_1_6_1","volume-title":"A combined process for elicitation and analysis of safety and security requirements,\" in Lecture Notes in Business Information Processing","author":"Raspotnig C.","year":"2012","unstructured":"C. Raspotnig , P. Karpati , and V. Katta , \" A combined process for elicitation and analysis of safety and security requirements,\" in Lecture Notes in Business Information Processing , 2012 . C. Raspotnig, P. Karpati, and V. Katta, \"A combined process for elicitation and analysis of safety and security requirements,\" in Lecture Notes in Business Information Processing, 2012."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.2"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1002\/9780470924891"},{"key":"e_1_3_2_1_9_1","volume-title":"Risk management - Risk assessment techniques","author":"International Electrotechnical Commission","year":"2009","unstructured":"International Electrotechnical Commission , \"ISO\/ IEC 31010 , Risk management - Risk assessment techniques ,\" 2009 . International Electrotechnical Commission, \"ISO\/IEC 31010, Risk management - Risk assessment techniques,\" 2009."},{"key":"e_1_3_2_1_10_1","volume-title":"Hazard and operability studies (HAZOP studies) - Application guide","author":"International Electrotechnical Commission","year":"2001","unstructured":"International Electrotechnical Commission , \" IEC 61882 : Hazard and operability studies (HAZOP studies) - Application guide ,\" 2001 . International Electrotechnical Commission, \"IEC 61882: Hazard and operability studies (HAZOP studies) - Application guide,\" 2001."},{"key":"e_1_3_2_1_11_1","volume-title":"61025 Fault tree analysis (FTA)","author":"International Electrotechnical Commission","year":"2006","unstructured":"International Electrotechnical Commission , \"IEC : 61025 Fault tree analysis (FTA) ,\" 2006 . International Electrotechnical Commission, \"IEC: 61025 Fault tree analysis (FTA),\" 2006."},{"key":"e_1_3_2_1_12_1","volume-title":"Analysis techniques for system reliability - procedure for failure mode and effects analysis (FMEA)","author":"International Electrotechnical Commission","year":"2006","unstructured":"International Electrotechnical Commission , \" IEC 60812 : Analysis techniques for system reliability - procedure for failure mode and effects analysis (FMEA) ,\" 2006 . International Electrotechnical Commission, \"IEC 60812: Analysis techniques for system reliability - procedure for failure mode and effects analysis (FMEA),\" 2006."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/983226"},{"issue":"12","key":"e_1_3_2_1_14_1","first-page":"21","article-title":"Attack trees","volume":"24","author":"Schneier B.","year":"1999","unstructured":"B. Schneier , \" Attack trees ,\" Dr. Dobb's journal , vol. 24 , no. 12 , pp. 21 -- 29 , 1999 . B. Schneier, \"Attack trees,\" Dr. Dobb's journal, vol. 24, no. 12, pp. 21--29, 1999.","journal-title":"Dr. Dobb's journal"},{"key":"e_1_3_2_1_15_1","volume-title":"Interagency Report","author":"Singhal A.","year":"2011","unstructured":"A. Singhal and X. Ou , \" Security risk analysis analysis of enterprise networks using probabilistic attack graphs.\" NIST Interagency Report 7788, August 2011 . A. Singhal and X. Ou, \"Security risk analysis analysis of enterprise networks using probabilistic attack graphs.\" NIST Interagency Report 7788, August 2011."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1963389"},{"key":"e_1_3_2_1_17_1","volume-title":"Information technology - security techniques","author":"International Standardization Organization","year":"2009","unstructured":"International Standardization Organization , \" ISO 27000 series : Information technology - security techniques ,\" 2009 . International Standardization Organization, \"ISO 27000 series: Information technology - security techniques,\" 2009."},{"key":"e_1_3_2_1_18_1","volume-title":"Information technology - security techniques - evaluation criteria for IT security (common criteria)","author":"International Standardization Organization","year":"2009","unstructured":"International Standardization Organization , \" ISO 15408 : Information technology - security techniques - evaluation criteria for IT security (common criteria) ,\" 2009 . International Standardization Organization, \"ISO 15408: Information technology - security techniques - evaluation criteria for IT security (common criteria),\" 2009."},{"key":"e_1_3_2_1_19_1","volume-title":"Road vehicles - functional safety","author":"International Standardization Organization","year":"2011","unstructured":"International Standardization Organization , \" ISO 26262 : Road vehicles - functional safety ,\" 2011 . International Standardization Organization, \"ISO 26262: Road vehicles - functional safety,\" 2011."},{"key":"e_1_3_2_1_20_1","unstructured":"Commission of the European Communities \"Directive 96\/48\/EC - Interoperability of the trans-European high speed rail system \" 1996.  Commission of the European Communities \"Directive 96\/48\/EC - Interoperability of the trans-European high speed rail system \" 1996."},{"key":"e_1_3_2_1_21_1","volume-title":"Industrial communication networks - network and system security - security for industrial automation and control systems","author":"International Electrotechnical Commission","year":"2009","unstructured":"International Electrotechnical Commission , \" IEC 62443 : Industrial communication networks - network and system security - security for industrial automation and control systems ,\" 2009 . International Electrotechnical Commission, \"IEC 62443: Industrial communication networks - network and system security - security for industrial automation and control systems,\" 2009."},{"key":"e_1_3_2_1_22_1","unstructured":"J. Braband \"Towards an IT security framework for railway automation \" (Toulouse) Feb. 2014.  J. Braband \"Towards an IT security framework for railway automation \" (Toulouse) Feb. 2014."},{"key":"e_1_3_2_1_23_1","volume-title":"railway applications - communication, signalling and processing systems - safety related electronic systems for signalling","author":"European Committee for Standardization, \"EN 50129","year":"2003","unstructured":"European Committee for Standardization, \"EN 50129 , railway applications - communication, signalling and processing systems - safety related electronic systems for signalling ,\" 2003 . European Committee for Standardization, \"EN 50129, railway applications - communication, signalling and processing systems - safety related electronic systems for signalling,\" 2003."},{"key":"e_1_3_2_1_24_1","volume-title":"Functional safety of electrical \/ electronic \/ programmable electronic safety-related systems","author":"International Electrotechnical Commission","year":"2010","unstructured":"International Electrotechnical Commission , \" IEC 61508 : Functional safety of electrical \/ electronic \/ programmable electronic safety-related systems ,\" 2010 . International Electrotechnical Commission, \"IEC 61508: Functional safety of electrical \/ electronic \/ programmable electronic safety-related systems,\" 2010."},{"key":"e_1_3_2_1_25_1","volume-title":"Integrating cyber attacks within fault trees,\" Reliability Engineering & System Safety","author":"Masera M.","year":"2009","unstructured":"M. Masera , I. N. Fovion , and A. D. Cian , \" Integrating cyber attacks within fault trees,\" Reliability Engineering & System Safety , 2009 . M. Masera, I. N. Fovion, and A. D. Cian, \"Integrating cyber attacks within fault trees,\" Reliability Engineering & System Safety, 2009."},{"key":"e_1_3_2_1_26_1","volume-title":"2010 IEEE International Conference on","author":"Pi\u00e9tre-Cambac\u00e9d\u00e8s L.","year":"2010","unstructured":"L. Pi\u00e9tre-Cambac\u00e9d\u00e8s and M. Bouissou , \" Modeling safety and security interdependencies with bdmp (boolean logic driven markov processes),\" in Systems Man and Cybernetics (SMC) , 2010 IEEE International Conference on , 2010 . L. Pi\u00e9tre-Cambac\u00e9d\u00e8s and M. Bouissou, \"Modeling safety and security interdependencies with bdmp (boolean logic driven markov processes),\" in Systems Man and Cybernetics (SMC), 2010 IEEE International Conference on, 2010."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2530277"},{"key":"e_1_3_2_1_28_1","unstructured":"Ministry of Defence (United Kingdom) \"HAZOP studies on systems containing programmable electronics part 2 general application guidance \" May 2000.  Ministry of Defence (United Kingdom) \"HAZOP studies on systems containing programmable electronics part 2 general application guidance \" May 2000."},{"key":"e_1_3_2_1_29_1","volume-title":"2013 43rd Annual IEEE\/IFIP Conference on","author":"Studnia I.","year":"2013","unstructured":"I. Studnia , V. Nicomette , E. Alata , Y. Deswarte , M. Ka\u00e2niche , and Y. Laarouchi , \" Survey on security threats and protection mechanisms in embedded automotive networks,\" in Dependable Systems and Networks Workshop (DSN-W) , 2013 43rd Annual IEEE\/IFIP Conference on , 2013 . I. Studnia, V. Nicomette, E. Alata, Y. Deswarte, M. Ka\u00e2niche, and Y. Laarouchi, \"Survey on security threats and protection mechanisms in embedded automotive networks,\" in Dependable Systems and Networks Workshop (DSN-W), 2013 43rd Annual IEEE\/IFIP Conference on, 2013."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"e_1_3_2_1_31_1","volume-title":"A survey of remote automotive attack surfaces","author":"Miller C.","year":"2014","unstructured":"C. Miller and C. Valasek , \" A survey of remote automotive attack surfaces ,\" 2014 . C. Miller and C. Valasek, \"A survey of remote automotive attack surfaces,\" 2014."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.4271\/2005-01-1428"},{"key":"e_1_3_2_1_33_1","first-page":"130","volume-title":"2014 IEEE International Conference on","author":"Odat H. A.","year":"2014","unstructured":"H. A. Odat and S. Ganesan , \" Firmware over the air for automotive, fotamotive,\" in Electro\/Information Technology (EIT) , 2014 IEEE International Conference on , pp. 130 -- 139 , IEEE, 2014 . H. A. Odat and S. Ganesan, \"Firmware over the air for automotive, fotamotive,\" in Electro\/Information Technology (EIT), 2014 IEEE International Conference on, pp. 130--139, IEEE, 2014."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/ALPIT.2008.18"},{"key":"e_1_3_2_1_35_1","first-page":"84","volume-title":"CISIS'08","author":"Nilsson D. K.","year":"2009","unstructured":"D. K. Nilsson , U. E. Larson , F. Picasso , and E. Jonsson , \" A first simulation of attacks in the automotive network communications protocol FlexRay,\" in Proceedings of the International Workshop on Computational Intelligence in Security for Information Systems , CISIS'08 , pp. 84 -- 91 , Springer , 2009 . D. K. Nilsson, U. E. Larson, F. Picasso, and E. Jonsson, \"A first simulation of attacks in the automotive network communications protocol FlexRay,\" in Proceedings of the International Workshop on Computational Intelligence in Security for Information Systems, CISIS'08, pp. 84--91, Springer, 2009."},{"key":"e_1_3_2_1_36_1","volume-title":"Comprehensive experimental analyses of automotive attack surfaces,\" in USENIX Security Symposium","author":"Checkoway S.","year":"2011","unstructured":"S. Checkoway , D. McCoy , B. Kantor , D. Anderson , H. Shacham , S. Savage , K. Koscher , A. Czeskis , F. Roesner , and T. Kohno , \" Comprehensive experimental analyses of automotive attack surfaces,\" in USENIX Security Symposium , 2011 . S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, S. Savage, K. Koscher, A. Czeskis, F. Roesner, and T. Kohno, \"Comprehensive experimental analyses of automotive attack surfaces,\" in USENIX Security Symposium, 2011."},{"key":"e_1_3_2_1_37_1","first-page":"1","volume-title":"2008 IEEE","author":"Nilsson D. K.","year":"2008","unstructured":"D. K. Nilsson , L. Sun , and T. Nakajima , \" A framework for self-verification of firmware updates over the air in vehicle ecus,\" in GLOBECOM Workshops , 2008 IEEE , pp. 1 -- 5 , IEEE, 2008 . D. K. Nilsson, L. Sun, and T. Nakajima, \"A framework for self-verification of firmware updates over the air in vehicle ecus,\" in GLOBECOM Workshops, 2008 IEEE, pp. 1--5, IEEE, 2008."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.102"},{"key":"e_1_3_2_1_39_1","first-page":"224","volume-title":"Secure automotive on-board protocols: a case of over-the-air firmware updates,\" in Communication Technologies for Vehicles","author":"Idrees M. S.","year":"2011","unstructured":"M. S. Idrees , H. Schweppe , Y. Roudier , M. Wolf , D. Scheuermann , and O. Henniger , \" Secure automotive on-board protocols: a case of over-the-air firmware updates,\" in Communication Technologies for Vehicles , pp. 224 -- 238 , Springer , 2011 . M. S. Idrees, H. Schweppe, Y. Roudier, M. Wolf, D. Scheuermann, and O. Henniger, \"Secure automotive on-board protocols: a case of over-the-air firmware updates,\" in Communication Technologies for Vehicles, pp. 224--238, Springer, 2011."},{"key":"e_1_3_2_1_40_1","volume-title":"Duqu: Analysis, detection, and lessons learned,\" in ACM European Workshop on System Security (EuroSec)","author":"Bencs\u00e1th B.","year":"2012","unstructured":"B. Bencs\u00e1th , G. P\u00e9k , L. Butty\u00e1n , and M. F\u00e9legyh\u00e1zi , \" Duqu: Analysis, detection, and lessons learned,\" in ACM European Workshop on System Security (EuroSec) , vol. 2012 , 2012 . B. Bencs\u00e1th, G. P\u00e9k, L. Butty\u00e1n, and M. F\u00e9legyh\u00e1zi, \"Duqu: Analysis, detection, and lessons learned,\" in ACM European Workshop on System Security (EuroSec), vol. 2012, 2012."},{"key":"e_1_3_2_1_41_1","volume-title":"Guideline for applying CHASSIS, draft","author":"Raspotnig C.","year":"2012","unstructured":"C. Raspotnig , P. Karpati , and K. Vikash , \" Guideline for applying CHASSIS, draft ,\" Nov. 2012 . C. Raspotnig, P. Karpati, and K. Vikash, \"Guideline for applying CHASSIS, draft,\" Nov. 2012."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2006.888386"},{"key":"e_1_3_2_1_43_1","first-page":"1","volume-title":"Security vulnerabilities and risks in industrial usage of wireless communication,\" in Emerging Technology and Factory Automation (ETFA)","author":"Pl\u00f3sz S.","year":"2014","unstructured":"S. Pl\u00f3sz , A. Farshad , M. Tauber , C. Lesjak , T. Ruprechter , and N. Pereira , \" Security vulnerabilities and risks in industrial usage of wireless communication,\" in Emerging Technology and Factory Automation (ETFA) , 2014 IEEE, pp. 1 -- 8 , IEEE , 2014. S. Pl\u00f3sz, A. Farshad, M. Tauber, C. Lesjak, T. Ruprechter, and N. Pereira, \"Security vulnerabilities and risks in industrial usage of wireless communication,\" in Emerging Technology and Factory Automation (ETFA), 2014 IEEE, pp. 1--8, IEEE, 2014."}],"event":{"name":"ASIA CCS '15: 10th ACM Symposium on Information, Computer and Communications Security","location":"Singapore Republic of Singapore","acronym":"ASIA CCS '15","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 1st ACM Workshop on Cyber-Physical System Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2732198.2732204","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2732198.2732204","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T15:04:09Z","timestamp":1750259049000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2732198.2732204"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,4,14]]},"references-count":43,"alternative-id":["10.1145\/2732198.2732204","10.1145\/2732198"],"URL":"https:\/\/doi.org\/10.1145\/2732198.2732204","relation":{},"subject":[],"published":{"date-parts":[[2015,4,14]]},"assertion":[{"value":"2015-04-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}