The Open UniversitySkip to content

Software Engineering Challenges for Investigating Cyber-Physical Incidents

Alrimawi, Faeq; Pasquale, Liliana and Nuseibeh, Bashar (2017). Software Engineering Challenges for Investigating Cyber-Physical Incidents. In: Proceedings of the 3rd International Workshop on Software Engineering for Smart Cyber-Physical Systems (SEsCPS ’17), 20-28 May 2017, Buenos Aires, Argentina.

Full text available as:
PDF (Version of Record) - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
Download (2MB) | Preview
DOI (Digital Object Identifier) Link:
Google Scholar: Look up in Google Scholar


Cyber-Physical Systems (CPS) are characterized by the interplay between digital and physical spaces. This characteristic has extended the attack surface that could be exploited by an offender to cause harm. An increasing number of cyber-physical incidents may occur depending on the configuration of the physical and digital spaces and their interplay. Traditional investigation processes are not adequate to investigate these incidents, as they may overlook the extended attack surface resulting from such interplay, leading to relevant evidence being missed and testing flawed hypotheses explaining the incidents. The software engineering research community can contribute to addressing this problem, by deploying existing formalisms to model digital and physical spaces, and using analysis techniques to reason about their interplay and evolution. In this paper, supported by a motivating example, we describe some emerging software engineering challenges to support investigations of cyber-physical incidents. We review and critique existing research proposed to address these challenges, and sketch an initial solution based on a meta-model to represent cyber-physical incidents and a representation of the topology of digital and physical spaces that supports reasoning about their interplay.

Item Type: Conference or Workshop Item
Copyright Holders: 2017 IEEE
Project Funding Details:
Funded Project NameProject IDFunding Body
(ASAP)291652ERC Advanced Grant
Not Set10/CE/I1855Science Foundation Ireland
Not Set13/RC/2094Science Foundation Ireland
Not Set15/SIRG/3501Science Foundation Ireland
Keywords: Servers; Process control; Malware; Temperature control; Aerospace electronics; Floors; cyber-physical systems; security of data; software engineering; cyber-physical incidents; digital spaces; physical spaces; Digital Investigation; CPS; Incidents
Academic Unit/School: Faculty of Science, Technology, Engineering and Mathematics (STEM) > Computing and Communications
Faculty of Science, Technology, Engineering and Mathematics (STEM)
Research Group: Centre for Research in Computing (CRC)
International Development & Inclusive Innovation
Health and Wellbeing PRA (Priority Research Area)
Item ID: 50907
Depositing User: Sandra Miller
Date Deposited: 12 Sep 2017 15:57
Last Modified: 07 Dec 2018 22:44
Share this page:


Altmetrics from Altmetric

Citations from Dimensions

Download history for this item

These details should be considered as only a guide to the number of downloads performed manually. Algorithmic methods have been applied in an attempt to remove automated downloads from the displayed statistics but no guarantee can be made as to the accuracy of the figures.

Actions (login may be required)

Policies | Disclaimer

© The Open University   contact the OU