| Abstract [eng] |
The doctoral dissertation is focused on finding an effective way to solve the secure system creation challenge at the early stage of system development by taking advantage of Model-Based Systems Engineering (MBSE). Traditionally, the system is treated as a secure system if the principles of Confidentiality, Integrity and Availability are guaranteed. This thesis introduces a novel MBSE method for creating secure systems. It allows specifying and analysing security aspect together with the system model for complex systems. The suggested MBSE method covers the full spectra of security phases, starting with security requirements, continuing on assets, model threats and risks and finishing with control objectives and controls. The use of model-based techniques ensures that the security and system artefacts are aligned at the early phase of system design, and MBSE benefits are extended to security engineer discipline. |
