The Security Architecture and Methodology of Cyber-Physical-Social System and Its Application to Boeing 737 Max 8 Accident Analysis
摘要
With the continuous changes in industrial technology, information technology, and management tools, Cyber-Physical-Social Systems (CPSS) are gradually becoming the pillars of today's industry. As a typical CPSS, the capabilities of cyber systems in the aviation industry are constantly being improved, and at the same time, they are also being integrated and interacting with social systems.. However, the nature of CPSS determines that security, operation, and maintenance in aerospace systems, as complex heterogeneous system integration and interaction problems, need to be analyzed with the help of system engineering methods, including architecture, methodology, system modeling, and system evaluation. This paper proposes a CPSS security integration architecture framework and a structured security analysis and design methodology based on the ideas and basic concepts of CPSS, combined with the dimension division ideas of the U.S. Federal Enterprise Architecture 2.0 (FEAF 2.0). It analyzes the Boeing 737 MAX 8, a typical aviation CPSS security case, and examines its accident causes with the help of formal modeling synthesis and systematic analysis. Through formal modeling and comprehensive systematic analysis of the accident causes, the effectiveness of the proposed architecture is demonstrated, providing a way of thinking and methodology for the systematic analysis of CPSS security issues.