[Back]

B. Brenner, E. Weippl, A. Ekelhart:
"Security Related Technical Debt in the Cyber-Physical Production Systems Engineering Process";
Talk: 45th Annual Conference of the IEEE Industrial Electronics Society (IECON 2019), Lisbon, Portugal, Portugal; 2019-10-14 - 2019-10-18; in: "IEEE", IEEE, (2019), ISBN: 978-1-7281-4878-6; 3012 - 3017.

Technical debt is an analogy introduced in 1992 by Cunningham to help explain how intentional decisions not to
follow a gold standard or best practice in order to save time or effort during creation of software can later on lead to a product
of lower quality in terms of product quality itself, reliability, maintainability or extensibility. Little work has been done so far
that applies this analogy to cyber physical (production) systems (CP(P)S). Also there is only little work that uses this analogy
for security related issues. This work aims to fill this gap: We want to find out which security related symptoms within the field
of cyber physical production systems can be traced back to TD items during all phases, from requirements and design down to
maintenance and operation. This work shall support experts from the field by being a first step in exploring the relationship between
not following security best practices and concrete increase of costs due to TD as consequence.