Diversity for Safety and Security in Embedded Systems

We present ongoing work about how security and safety properties in embedded systems are affected by redundancy and diversity. The need to consider security requirements in the presence of malicious action creates additional design trade-offs besides those familiar in the design of safety critical and highly reliable systems. We outline the motivation for this work, an industrial case study, and the research direction we have taken

Medicinal service supply by wild plants in Samburu, Kenya: Comparisons among medicinal plant assemblages

Supply of medicinal plants from African landscapes is crucial because of their widespread use. Rapid climate change and land use change are potential threats to this resource but knowledge about the ecological needs of many of these plants is still rather limited. More knowledge about potential threats to medicinal plants supply and options to prevent future losses are desirable. Therefore, the objectives of the study were to examine (1) the effects of environmental drivers on the occurrence of medicinal plant species, (2) how different vegetation formations contribute to the provision of plants used for the treatment of diseases and (3) how these contributions are secured by redundancy. The analysis was based on a sample of 130 sampling plots in Samburu County, Kenya. We identified patterns in medicinal plants co-occurrences using classification and ordination analyses and analyzed these pattern in terms of environmental drivers, service diversity and service security. The pattern in medicinal plants co-occurrences reflected the distribution of broad formations (bushed grassland, forest, wooded grassland, savanna) driven by differences in grazing pressure, drought, slope and fraction of sand in soils. Each of the formations brought with it its own characteristic endowment with medicinal plants. The formations differed in the diversity and security of medicinal services provided. All resulted as fulfilling unique services with diseases treated by plants occurring exclusively in one or another formation. Forests featured the highest diversity of medicinal services, with medicinal plants used against 67 diseases. The supply security in forests, resulting from redundancy in supply provision, was moderate. In contrast to this, savanna grasslands featured plants with uses against 49 diseases, some of them were treated exclusively by plants from savanna grasslands. This formation also showed the highest redundancy. Wooded grasslands showed very little redundancy and is likely to be adversely affected by climate change. Whereas savannas feature the largest pool of medicinal plants and should receive due attention, urgent and highest conservation priority should, presently and in future, go towards the wooded grassland that had the lowest supply redundancy for traditional medicine

National patterns of functional diversity and redundancy in predatory ground beetles and bees associated with key UK arable crops

1. Invertebrates supporting natural pest control and pollination ecosystem services are crucial to world-wide crop production. Understanding national patterns in the spatial structure of natural pest control and pollination can be used to promote effective crop management and contribute to long-term food security. 2. We mapped the species richness and functional diversity of ground beetles and bees to provide surrogate measures of natural pest control and pollination for Great Britain. Func- tional diversity represents the value and range of morphological and behavioural traits that support ecosystem services. We modelled the rate at which functional diversity collapsed in response to species extinctions to provide an index of functional redundancy. 3. Deficits in functional diversity for both pest control and pollination were found in areas of high arable crop production. Ground beetle functional redundancy was positively corre- lated with the landscape cover of semi-natural habitats where extinctions were ordered by body size and dispersal ability. For bees, functional redundancy showed a weak positive cor- relation with semi-natural habitat cover where species extinctions were ordered by feeding specialization. 4. Synthesis and applications. Increasingly, evidence suggests that functionally diverse assem- blages of ground beetles and bees may be a key element to strategies that aim to support pol- lination and natural pest control in crops. If deficits in both functional diversity and redundancy in areas of high crop production are to be reversed, then targeted implementation of agri-environment schemes that establish semi-natural habitat may provide a policy mecha- nism for supporting these ecosystem services

An Experimental Study of Diversity with Off-The-Shelf AntiVirus Engines

Fault tolerance in the form of diverse redundancy is well known to improve the detection rates for both malicious and non-malicious failures. What is of interest to designers of security protection systems are the actual gains in detection rates that they may give. In this paper we provide exploratory analysis of the potential gains in detection capability from using diverse AntiVirus products for the detection of self-propagating malware. The analysis is based on 1599 malware samples collected by the operation of a distributed honeypot deployment over a period of 178 days. We sent these samples to the signature engines of 32 different AntiVirus products taking advantage of the VirusTotal service. The resulting dataset allowed us to perform analysis of the effects of diversity on the detection capability of these components as well as how their detection capability evolves in time

Diversity, Safety and Security in Embedded Systems: modelling adversary effort and supply chain risks

We present quantitative considerations for the design of redundancy and diversity in embedded systems with security requirements. The potential for malicious activity against these systems have complicated requirements and design choices. New design trade-offs have arisen besides those already familiar in this area: for instance, adding redundancy may increase the attack surface of a system and thus increase overall risk. Our case study concerns protecting redundant communications between a control system and its controlled physical system. We study the effects of using: (i) different encryption keys on replicated channels, and (ii) diverse encryption schemes and implementations. We consider two attack scenarios, with adversaries having access to (i) ways of reducing the search space in attacks using random searches for keys; or (ii) hidden major flaws in some crypto algorithm or implementation. Trade-offs between the requirements of integrity and confidentiality are found, but not in all cases. Simple models give useful design insights. In this system, we find that key diversity improves integrity without impairing confidentiality – no trade-offs arise between the two – and it can substantially increase adversary effort, but it will not remedy substantial weaknesses of the crypto system. Implementation diversity does involve design trade-offs between integrity and confidentiality, which we analyse, but turns out to be generally desirable for highly critical applications of the control system considered