1 HW ( ) - ( ) 2 3 HAZOP (1) (2) (3) 1 (4) (5) (6) (7) (1)-(7) 3. HAZOP HAZOP 3.1 IEC ) HAZOP 1 2 c 2009 Informa

Size: px

Start display at page:

Download "1 HW ( ) - ( ) 2 3 HAZOP (1) (2) (3) 1 (4) (5) (6) (7) (1)-(7) 3. HAZOP HAZOP 3.1 IEC ) HAZOP 1 2 c 2009 Informa"

しゅんすけねぎたや
5 years ago
Views:

1 HAZOP HAZOP A Method of Deriving Anomaly Detection Rule by HAZOP Analysis Takahiro Hidaka, 1 Fumio Yamazaki, 1 Yukikazu Nakamoto, 3 Shinya Honda 2 and Hiroaki Takada 2 With enlargement the scale of automotive systems, it becomes harder to verify by traditional method. In this study, we propose to derive anomaly detection rule from result of HAZOP. And we evaluate this method by example and implementation. We show this method is valid for component oriented software, and easy to adopt rule for constraint of embedded system. 1. AUTOSAR FMEA FTA HAZOP 1) HAZOP 1 Center for Embedded Computing Systems, Nagoya University 2 Graduate School of Information Science Nagoya University 3 Center for Embedded Computing Systems, Nagoya University / Graduate School of Applied Informatics University of Hyogo 1 c 2009 Information Processing Society of Japan

2 1 HW ( ) - ( ) 2 3 HAZOP (1) (2) (3) 1 (4) (5) (6) (7) (1)-(7) 3. HAZOP HAZOP 3.1 IEC ) HAZOP 1 2 c 2009 Information Processing Society of Japan

3 2 2 HAZOP no - less more other than part of reverse early late ) IEC ) HAZOP HAZOP HAZOP ( 1 ) ( 2 ) ( 3 ) HAZOP 2 R( ) 2 HAZOP (30fps) 2 no, less, more ( ) ECU HAZOP 4 no late c 2009 Information Processing Society of Japan

4 3 HAZOP = 30(fps) no 4 less 3 more, 3 part of 3 reverse 3 other than < < 100 no 2 less 3 more 3 = {P, R, N, D, 2} no 2 reverse 3 other than 3 = 30(fps) no 4 less 3 more 1 part of 3 reverse 3 < 30(ms) late HAZOP ( 3) HAZOP HAZOP HAZOP (s) no 1 4 less fps < more fps > part of CRC 1 3 reverse CRC 1 3 other than no 60 2 less < more > no 60 2 reverse = 3 other than = 1 3 no 1 4 less fps < more fps > part of CRC 1 3 reverse CRC 1 3 late - > 30ms 4 less fps<20 part of/reverse CRC HAZOP 4. Unix OS c 2009 Information Processing Society of Japan

5 libdtrace 6) no, less, more, other than, early, late 2 part of, reverse DTrace D 1 syscall read/write profile 1 1 D 3 5 HAZOP DTrace TCP/IP 4.1 DTrace Sun Microsystems DTrace 5) DTrace Solaris FreeBSD MacOSX OS OS D DTrace OS count() 1 interval.d 1 syscall :: write : entry 2 / pid == $target && trace_count_rw / 3 { [ arg0 ] = count (); 5 } 6 syscall :: read : entry 7 / pid == $target && trace_count_rw / 8 { [ arg0 ] = count (); 10 } 11 profile :: tick -1s 12 / trace_count_rw / 13 { 14 printa (" MSG : count_rw write ); 15 printa (" MSG : count_rw read ); 16 clear ); 17 clear ); 18 } / 2 syscall read DTrace copyin() 5 c 2009 Information Processing Society of Japan

6 1 self int read_sock ; 2 self int read_buf ; syscall :: read : entry 5 / pid == $target / 6 { 7 self ->read_sock = arg0 ; 8 self ->read_buf = arg1 ; 9 } 10 syscall :: read : return 11 / pid == $target && 0 < arg0 && trace_value / 12 { 13 printf (" MSG : value read sock =%d, buffer =%d\n", 14 self ->read_sock, 15 *(( char *) copyin (self ->read_buf, 1))); 16 } value.d 実行時間 (%) no null noval all メモリ使用量 (KB) メモリ使用量 user 時間 sys 時間 4.2 libdtrace D DTrace D SIGTERM 5. 4 Intel Core2Duo + VMware Server no:, null:, noval:, all: 4 all noval 4 4 実行時間比 user 時間 sys 時間 0.96 no null noval all 5 user /sys ( :%) mem( :KB) 5 (user,sys) 1 8% 4 6% 6 c 2009 Information Processing Society of Japan

7 6 MAPE-K MAPE-K Monitor DTrace Analysis Plan - - Execution Knowledge HAZOP 6 MAPE-K 3MB DTrace 6. IBM 6 MAPE-K 7) IBM 8) MAPE-K Monitor,Analysis,Plan,Execution,Knowledge 5 6 MAPE-K Knowledge,Analysis HAZOP Monitor DTrace Plan Plan (Anomaly detection) (Intrusion Detection System) 2 9) CPU 10) 11) HAZOP 7. HAZOP DTrace 7 c 2009 Information Processing Society of Japan

8 HAZOP CRC MAPE-K Plan RTOS BR OS on Object/Component/Service-Oriented Real-Time Distributed Computing, pp (2009). 11) Waizumi, Y., Kudo, D., Kato, N. and Nemoto, Y.: A New Network Anomaly Detection Technique Based on Per-Flow and Per-Service Statistics, Computational Intelligence and Security, Splinger Verlag., pp (2005). 1) ISO (JIS B9705-1) IEC (JIS B9960-1) IEC61508(JIS C0508) ( ) (2007). 2) IEC 61882: Hazard and operability studies (HAZOP studies)- Application Guide (2001). 3) Redmill, F., Chudleigh, M. and Richard, J.C.: System Safety: HAZOP and Software HAZOP, Wiley-Blackwell (1999). 4) IEC 61508: Functional safety of electrical/electronic/programmable electronic safety-related systems (2005). 5) McDougall, R., Mauro, J. and Gregg, B.: Solaris Performance and Tools : DTrace and Mdb Techniques for Solaris 10 and OpenSolaris, Prentice Hall (2006). 6) Sun Microsystems, Inc.: libdtrace(3lib), 7) IBM: An Architectural Blueprint for Autonomic Computing, Blueprint White Paper 4th.pdf (2006). 8) PROVISION 58, IBM (2008). 9) Meadows, C.: A Formal Framework and Evaluation Method for Network Denial of Service, Processings of the 1999 IEEE Computer Society Foundations Workshop, pp.4 13 (1999). 10) Sugaya, M., Ohno, Y., vander Zee, A. and Nakajima, T.: A Lightweight Anomaly Detection System for Information Appliances, Processings of IEEE Symposium 8 c 2009 Information Processing Society of Japan

IPSJ SIG Technical Report Vol.2017-ARC-225 No.12 Vol.2017-SLDM-179 No.12 Vol.2017-EMB-44 No /3/9 1 1 RTOS DefensiveZone DefensiveZone MPU RTOS

IPSJ SIG Technical Report Vol.2017-ARC-225 No.12 Vol.2017-SLDM-179 No.12 Vol.2017-EMB-44 No /3/9 1 1 RTOS DefensiveZone DefensiveZone MPU RTOS 1 1 RTOS DefensiveZone DefensiveZone MPU RTOS RTOS OS Lightweight partitioning architecture for automotive systems Suzuki Takehito 1 Honda Shinya 1 Abstract: Partitioning using protection RTOS has high