Cyber security lifecycle and assessment technique for FPGA-based I&C systems

Abstract

This paper presents an overview of the state-of-the-art of Field Programmable Gate Arrays (FPGA)-based Instrumentation and Control (I&C) systems cyber security assurance problem, brief analysis of regulatory documents that cover various aspects of I&C systems development and operation, FPGA technology implementation, and cyber security assessment and assurance of FPGA-based I&C systems. Cyber security assessment technique which is based on Gap Analysis (GA) and Intrusion Modes and Effects Criticality Analysis (IMECA) procedures is proposed. The technique is applicable to safety-critical FPGA-based I&C systems and complex computer-based I&C systems as a whole. Elements of GA-and-IMECA technique of assessment are described. The paper provides example of GA-and-IMECA-based cyber security analysis procedure for several types of vulnerabilities.