In the last years, cyber-physical systems (CPS) are receiving substantial mainstream attention especially in industrial environments, but this popularity has been accompanied by serious security challenges. A CPS is a complex system that includes hardware and software components, with different suppliers and connection protocols, forcing complex data management and storage. For this reason, the construction, verification and diagnosis of security CPS become a major challenge, which involves a correct specification of security requirements, the verification of the correct system configurations, and if necessary, the diagnosis to detect the features to be modified to obtain a security configuration. In this paper, we propose a framework for the verification and diagnosis of security requirements, according to the possible correct configurations of the CPS. The framework is based on the specification of the security requirements and their analysis supported by Model-Driven Engineering and Software Product Line Engineering (SPLE) approaches. To illustrate the usefulness, the proposal has been applied to the security requirements in an Agriculture 4.0 scenario based on automated hydroponic cultivation.

在过去几年中，网络物理系统 (CPS) 受到了主流的广泛关注，尤其是在工业环境中，但这种流行伴随着严重的安全挑战。CPS 是一个复杂的系统，包括硬件和软件组件，具有不同的供应商和连接协议，迫使复杂的数据管理和存储。为此，安全CPS的构建、验证和诊断成为一项重大挑战，它涉及安全需求的正确规范，正确系统配置的验证，以及必要时诊断以检测要修改的特征以获得一个安全配置。在本文中，我们提出了一个用于验证和诊断安全需求的框架，根据 CPS 可能的正确配置。该框架基于模型驱动工程和软件产品线工程 (SPLE) 方法支持的安全需求规范及其分析。为了说明实用性，该提案已应用于基于自动水培栽培的农业 4.0 场景中的安全要求。