A conceptual redesign of a modelling language for cyber resiliency of healthcare systems

Myrsini Athinaiou; Haris Mouratidis; Theo Fotis; Michalis Pavlidis

doi:10.1007/978-3-030-42048-2_10

A conceptual redesign of a modelling language for cyber resiliency of healthcare systems

Myrsini Athinaiou, Haris Mouratidis, Theo Fotis, Michalis Pavlidis

Doctoral College

Research output: Chapter in Book/Conference proceeding with ISSN or ISBN › Conference contribution with ISSN or ISBN › peer-review

Abstract

Security constraints that enforce security requirements characterize healthcare systems. These constraints have a substantial impact on the resiliency of the final system. Security requirements modelling approaches allow the prevention of cyber incidents; however, the focus to date has been on prevention rather than resiliency. Resiliency extends into the detection, mitigation and recovery after security violations. In this paper, we propose an enhanced at a conceptual level that attempts to align cybersecurity with resiliency. It does so by extending the Secure Tropos cybersecurity modelling language to include resiliency. The proposed conceptual model examines resiliency from three viewpoints, namely the security requirements, the healthcare context and its implementational capability. We present an overview of our conceptual model of a cyber resiliency language and discuss a case study to attest the healthcare context in our approach.

Original language	English
Title of host publication	Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers
Subtitle of host publication	In conjunction with ESORICS 2019
Editors	Sokratis Katsikas, Sokratis Katsikas, Frédéric Cuppens, Nora Cuppens, Costas Lambrinoudakis, Stefanos Gritzalis, Christos Kalloniatis, John Mylopoulos, Annie Antón, Frank Pallas, Jörg Pohle, Angela Sasse, Weizhi Meng, Steven Furnell, Joaquin Garcia-Alfaro
Place of Publication	Cham
Publisher	Springer
Pages	140-158
Number of pages	19
ISBN (Electronic)	9783030420482
ISBN (Print)	9783030420475
DOIs	https://doi.org/10.1007/978-3-030-42048-2_10
Publication status	Published - 22 Feb 2020

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	11980 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Keywords

security
Modelling language
Healthcare
Resiliency
Security

Access to Document

10.1007/978-3-030-42048-2_10

2019-08-30 SecPre 2019 CRVAccepted author manuscript, 716 KB

Cite this

Athinaiou, M., Mouratidis, H., Fotis, T., & Pavlidis, M. (2020). A conceptual redesign of a modelling language for cyber resiliency of healthcare systems. In S. Katsikas, S. Katsikas, F. Cuppens, N. Cuppens, C. Lambrinoudakis, S. Gritzalis, C. Kalloniatis, J. Mylopoulos, A. Antón, F. Pallas, J. Pohle, A. Sasse, W. Meng, S. Furnell, & J. Garcia-Alfaro (Eds.), Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers: In conjunction with ESORICS 2019 (pp. 140-158). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11980 LNCS). Springer. https://doi.org/10.1007/978-3-030-42048-2_10

Athinaiou, Myrsini ; Mouratidis, Haris ; Fotis, Theo et al. / A conceptual redesign of a modelling language for cyber resiliency of healthcare systems. Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers: In conjunction with ESORICS 2019. editor / Sokratis Katsikas ; Sokratis Katsikas ; Frédéric Cuppens ; Nora Cuppens ; Costas Lambrinoudakis ; Stefanos Gritzalis ; Christos Kalloniatis ; John Mylopoulos ; Annie Antón ; Frank Pallas ; Jörg Pohle ; Angela Sasse ; Weizhi Meng ; Steven Furnell ; Joaquin Garcia-Alfaro. Cham : Springer, 2020. pp. 140-158 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{da5fe295cf424f65b94960dd71e62c86,

title = "A conceptual redesign of a modelling language for cyber resiliency of healthcare systems",

abstract = "Security constraints that enforce security requirements characterize healthcare systems. These constraints have a substantial impact on the resiliency of the final system. Security requirements modelling approaches allow the prevention of cyber incidents; however, the focus to date has been on prevention rather than resiliency. Resiliency extends into the detection, mitigation and recovery after security violations. In this paper, we propose an enhanced at a conceptual level that attempts to align cybersecurity with resiliency. It does so by extending the Secure Tropos cybersecurity modelling language to include resiliency. The proposed conceptual model examines resiliency from three viewpoints, namely the security requirements, the healthcare context and its implementational capability. We present an overview of our conceptual model of a cyber resiliency language and discuss a case study to attest the healthcare context in our approach.",

keywords = "security, Modelling language, Healthcare, Resiliency, Security",

author = "Myrsini Athinaiou and Haris Mouratidis and Theo Fotis and Michalis Pavlidis",

year = "2020",

month = feb,

day = "22",

doi = "10.1007/978-3-030-42048-2_10",

language = "English",

isbn = "9783030420475",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "140--158",

editor = "Sokratis Katsikas and Sokratis Katsikas and Fr{\'e}d{\'e}ric Cuppens and Nora Cuppens and Costas Lambrinoudakis and Stefanos Gritzalis and Christos Kalloniatis and John Mylopoulos and Annie Ant{\'o}n and Frank Pallas and J{\"o}rg Pohle and Angela Sasse and Weizhi Meng and Steven Furnell and Joaquin Garcia-Alfaro",

booktitle = "Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers",

}

Athinaiou, M, Mouratidis, H, Fotis, T & Pavlidis, M 2020, A conceptual redesign of a modelling language for cyber resiliency of healthcare systems. in S Katsikas, S Katsikas, F Cuppens, N Cuppens, C Lambrinoudakis, S Gritzalis, C Kalloniatis, J Mylopoulos, A Antón, F Pallas, J Pohle, A Sasse, W Meng, S Furnell & J Garcia-Alfaro (eds), Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers: In conjunction with ESORICS 2019. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11980 LNCS, Springer, Cham, pp. 140-158. https://doi.org/10.1007/978-3-030-42048-2_10

A conceptual redesign of a modelling language for cyber resiliency of healthcare systems. / Athinaiou, Myrsini; Mouratidis, Haris; Fotis, Theo et al.
Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers: In conjunction with ESORICS 2019. ed. / Sokratis Katsikas; Sokratis Katsikas; Frédéric Cuppens; Nora Cuppens; Costas Lambrinoudakis; Stefanos Gritzalis; Christos Kalloniatis; John Mylopoulos; Annie Antón; Frank Pallas; Jörg Pohle; Angela Sasse; Weizhi Meng; Steven Furnell; Joaquin Garcia-Alfaro. Cham: Springer, 2020. p. 140-158 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11980 LNCS).

Research output: Chapter in Book/Conference proceeding with ISSN or ISBN › Conference contribution with ISSN or ISBN › peer-review

TY - GEN

T1 - A conceptual redesign of a modelling language for cyber resiliency of healthcare systems

AU - Athinaiou, Myrsini

AU - Mouratidis, Haris

AU - Fotis, Theo

AU - Pavlidis, Michalis

PY - 2020/2/22

Y1 - 2020/2/22

N2 - Security constraints that enforce security requirements characterize healthcare systems. These constraints have a substantial impact on the resiliency of the final system. Security requirements modelling approaches allow the prevention of cyber incidents; however, the focus to date has been on prevention rather than resiliency. Resiliency extends into the detection, mitigation and recovery after security violations. In this paper, we propose an enhanced at a conceptual level that attempts to align cybersecurity with resiliency. It does so by extending the Secure Tropos cybersecurity modelling language to include resiliency. The proposed conceptual model examines resiliency from three viewpoints, namely the security requirements, the healthcare context and its implementational capability. We present an overview of our conceptual model of a cyber resiliency language and discuss a case study to attest the healthcare context in our approach.

AB - Security constraints that enforce security requirements characterize healthcare systems. These constraints have a substantial impact on the resiliency of the final system. Security requirements modelling approaches allow the prevention of cyber incidents; however, the focus to date has been on prevention rather than resiliency. Resiliency extends into the detection, mitigation and recovery after security violations. In this paper, we propose an enhanced at a conceptual level that attempts to align cybersecurity with resiliency. It does so by extending the Secure Tropos cybersecurity modelling language to include resiliency. The proposed conceptual model examines resiliency from three viewpoints, namely the security requirements, the healthcare context and its implementational capability. We present an overview of our conceptual model of a cyber resiliency language and discuss a case study to attest the healthcare context in our approach.

KW - security

KW - Modelling language

KW - Healthcare

KW - Resiliency

KW - Security

UR - http://www.scopus.com/inward/record.url?scp=85081565826&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-42048-2_10

DO - 10.1007/978-3-030-42048-2_10

M3 - Conference contribution with ISSN or ISBN

SN - 9783030420475

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 140

EP - 158

BT - Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers

A2 - Katsikas, Sokratis

A2 - Cuppens, Frédéric

A2 - Cuppens, Nora

A2 - Lambrinoudakis, Costas

A2 - Gritzalis, Stefanos

A2 - Kalloniatis, Christos

A2 - Mylopoulos, John

A2 - Antón, Annie

A2 - Pallas, Frank

A2 - Pohle, Jörg

A2 - Sasse, Angela

A2 - Meng, Weizhi

A2 - Furnell, Steven

A2 - Garcia-Alfaro, Joaquin

PB - Springer

CY - Cham

ER -

Athinaiou M, Mouratidis H, Fotis T , Pavlidis M. A conceptual redesign of a modelling language for cyber resiliency of healthcare systems. In Katsikas S, Katsikas S, Cuppens F, Cuppens N, Lambrinoudakis C, Gritzalis S, Kalloniatis C, Mylopoulos J, Antón A, Pallas F, Pohle J, Sasse A, Meng W, Furnell S, Garcia-Alfaro J, editors, Computer Security - ESORICS 2019 International Workshops, CyberICPS, SECPRE, SPOSE, and ADIoT, Revised Selected Papers: In conjunction with ESORICS 2019. Cham: Springer. 2020. p. 140-158. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-42048-2_10

A conceptual redesign of a modelling language for cyber resiliency of healthcare systems

Abstract

Publication series

Keywords

Access to Document

Other files and links

Fingerprint

Michalis Pavlidis

Model-based Management of Cyber Resiliency for Healthcare Systems

Cite this

A conceptual redesign of a modelling language for cyber resiliency of healthcare systems

Abstract

Publication series

Keywords

Access to Document

Other files and links

Fingerprint

Profiles

Michalis Pavlidis

Activities

Model-based Management of Cyber Resiliency for Healthcare Systems

Cite this