ICS-Dev-Sec : une méthodologie de sécurité dès la conception fondée sur l'ingénierie dirigée par les modèles pour le développement de systèmes de contrôle industriel sécurisés

In recent years, Industrial Control Systems (ICS) have evolved into Cyber-Physical Systems (CPS), which has increased their exposure to advanced cyber threats. As reactive defenses often prove insufficient, a proactive security-by-design paradigm is required to address such risks effectively. This thesis proposes a model-based security-by-design methodology that integrates ISA/IEC 62443 into the Requirement, Functional, Logical, and Physical (RFLP) development process, with emphasis on the Functional and Logical phases. Two complementary workflows are defined: (i) ICS-Fun-Sec supports the functional phase by automating segmentation, assigning security levels, and identifying required security functions. It relies on a Domain-Specific Language (DSL) and a model transformation process. The DSL captures architectural and security concepts via functional and security metamodels, enabling collaboration between system architects and security experts while ensuring coherence within a unified framework. Model transformations enable functional architectures conforming to the functional metamodel to be systematically converted into secure architectures conforming to the security metamodel. (ii) ICS-Log-Sec operates at the logical level, detecting architectural weaknesses and recommending appropriate countermeasures. It is likewise supported by an extended DSL and model transformation rules that integrate logical concepts. Validation through case studies confirmed the accuracy of segmentation and security function identification. The workflows, the DSL and the model transformations were systematically assessedto ensure their validity.