A Security Modelling Framework for Systems of Embedded Components

The development of systems based on embedded components is a challenging task because of the distributed, reactive and real-time nature of such systems. From a security point of view, embedded devices are basically systems owned by a certain entity and operated in a potentially hostile environment. Currently, a security engineering process for systems with embedded components that takes these considerations into account does not exist. This paper presents a process, which aims to support the embedded systems developer in integrating the security elements into the overall engineering process. In particular, the proposed process provides means to identify and to consistently and naturally manage security properties and requirements.