A System‐Aware Cyber Security architecture

Abstract

As exemplified in the 2010 Stuxnet attack on an Iranian nuclear facility, attackers have the capabilities to embed infections in equipment that is employed in nuclear power systems. In this paper, a new systems engineering focused approach for mitigating such risks is described. This approach involves the development of a security architectural formulation that integrates a set of reusable security services as an architectural solution that is an embedded component of the system to be protected. The System‐Aware architectural approach embeds security components into the system to be protected. The architecture includes services that (1) collect and assess real‐time security relevant measurements from the system being protected, (2) perform security analysis on those measurements, and (3) execute system security control actions as required. This architectural formulation results in a defense that is referred to as System‐Aware Cyber Security. This includes (1) the integration of a diverse set of dynamically interchangeable redundant subsystems involving hardware and software components provided from multiple vendors to significantly increase the difficulty for adversaries by avoiding a monoculture environment, (2) the development of subsystems that are capable of rapidly changing their attack surface through hardware and software reconfiguration (configuration hopping) in response to perceived threats, (3) data consistency checking services (e.g., intelligent voting mechanisms) for isolating faults and permitting moving surface control actions to avoid operations in a compromised configuration, and (4) forensic analysis techniques for rapid post‐attack categorization of whether a given fault is more likely the result of an infected embedded hardware or software component (i.e., cyber attack) or a natural failure. In this paper we present these key elements of the System‐Aware Cyber Security architecture and show, including an application example, how they can be integrated to mitigate the risks of insider and supply chain attacks. In addition, this paper outlines an initial vision for a security analysis framework to compare alternative System‐Aware security architectures. Finally, we summarize future research that is necessary to facilitate implementation across additional domains critical to the nation's interest. © 2012 Wiley Periodicals, Inc. Syst Eng

Achieving resiliency in major defense programs through nonfunctional attributes

“…Leonard also focused on DoD cyber systems and found that the DoD needs to move beyond developing survivable cyber systems to incorporate resiliency in their cyber systems. Jones and Horowitz discuss the development of system‐aware cyber security architectures in their work that emphasizes designing cyber systems that can detect threats to ensure performance. They expand on this work by developing a scoring scheme for evaluating cyber‐secure architectures during development .…”

An Architecture for Agile Systems Engineering of Secure Commercial Off-the-Shelf Mobile Communications

“…The CPs include enough specificity to aide integrators in the application of advanced systems engineering strategies for addressing cyber security concerns. As one example, vendor diversity is a key aspect of cyber resilience [Jones and Horowitz, ], and the CP addresses this requirement. The CPs form a foundation for the reference architecture proposed.…”

System‐aware Cyber Security: A Systems Engineering Approach for Enhancing Cyber Security

“…To combat the threat posed by cyber attacks on cyber physical systems, a UValed research team proposed a system-aware, sentinel-based cyber security concept, complementing existing network and perimeter security solutions by adding an additional layer of defense (Jones et al 2013;Jones and Horowitz 2012;Horowitz and Pierce 2013). The term "system-aware" indicates that the design of sentinels must directly account for how engineers design the system being protected and its operation, in contrast to network and perimeter security solutions.…”