Comparative Analysis of AAS and AML as a Data Source for Integrated Risk Assessment in ICS

Abstract

Integrated risk assessment is important to identify, evaluate, and mitigate potential risks in Industrial Control Systems (ICS). It is necessary for safety and security within the organization. The safety and security data necessary for integrated risk assessment are obtained from various data sources that structure and manage information. In this paper, we look into information models as a potential single source of data. We compare different information models: Asset Administration Shell (AAS) and Automation Markup Language (AML). The comparison highlights the strengths and weaknesses, commonalities and differences of each data source in terms of data integration, real-time capability, standardization, design capability, automation possibility, and practical application in risk assessment processes. The findings underscore the importance of selecting appropriate data sources to enhance the accuracy, provide the possibility of updates, and enhance the efficiency of risk assessments in ICS.