Differences between Safety and Security Specifications

Differences between Safety and Security Specifications

1

safety problems are accidental. in security, you must assume that attackers have knowledge of system weaknesses

2

when safety failures occur, you can look for the root cause or weakness that led to the failure. when failure results from a deliberate attack, the attack may conceal the cause of the failure

3

shutting down a system can avoid a safety-related failure. causing a shut down may be the aim of an attack

4

safety related events are not generated from an intelligent adversary. an attacker can probe defecnes over time to discover weaknesses