Cross-fertilization between safety and security engineering

The purpose of this paper is to give a comprehensive view of methods, models, tools and techniques that have been created in safety engineering and transposed to security engineering, or vice versa. Since the concepts of safety and security can somewhat vary according to the context, the first section of the paper deals with the scope and definitions that will be used in the sequel. The similarities and differences between the two domains are analyzed. A careful screening of the literature (this paper contains 201 references) made it possible to identify cross-fertilizations in various fields such as architectural concepts (e.g. defense in depth, security or safety kernels), graphical formalisms (e.g. attack trees), structured risk analyses or fault tolerance and prevention techniques.

► This paper presents safety methods/techniques transposed to security or vice versa. ► Cross fertilizations have been found in various fields. ► This includes architectural concepts, graphical formalisms, risk analyses or testing. ► There have been more adaptations from safety to security than the opposite. ► The potential for fruitful cross-fertilizations between these domains remains high.