S\'ecurit\'e des syst\`emes critiques et cybercriminalit\'e : vers une s\'ecurit\'e globale ?

TL;DR

This paper discusses the importance of integrating safety and security considerations in modern critical systems to prevent catastrophic failures from both accidental and malicious events.

Contribution

It highlights the need for a comprehensive approach to safety and security in interconnected critical information systems, emphasizing their interdependence.

Findings

Critical systems require combined safety and security strategies.

Malicious attacks pose significant risks to critical infrastructure.

An integrated approach enhances system resilience.

Abstract

For modern critical systems, it is necessary to consider their ability to avoid catastrophic behavior following fortuitous events such as internal failures in hardware components, environmental disturbances or even involuntary human error in the design and operation, but also non fortuitous events such as malicious attacks. Unfortunately, in French the same word "s\'ecurit\'e" is used to cover two different problematics, what in English is expressed in two different words : safety and security. The interconnected modern information systems, such as rail traffic signalling systems point out the need to deal in an overall way with both safety and security