SALSA - Living Safety & Security Cases for Cyber Physical System Certification

Safety cases are an established method within certification processes of embedded systems. They trace safety goals down to safety solutions, providing evidence for the fulfilment of a system´s safety properties.

Albeit, safety cases do not scale up to large-scale cyber-physical systems like platforms for autonomous driving or smart factory infrastructures due to the lacking support of security-specific aspects and system changes. Within SALSA, our goal is to develop a novel tool-supported method of “living” safety&security cases enabling efficient compliance management in settings characterized by heterogeneity, cross-organizational structures, certification with respect to multiple standards and short release cycles. Core concepts within SALSA are a Workflow-enhanced Knowledge Base supporting collaborative maintenance of security/safety evidence chains, coordination of tasks in multi-standard contexts and efficient handling of system releases. The SALSA framework will be evaluated in the context of autonomous driving.