Communications, Information, and Cyber Security in Systems-of-Systems: Assessing the Impact of Attacks through Interdependency Analysis

Guariniello, Cesare; DeLaurentis, Daniel A.

doi:10.1016/j.procs.2014.03.086

Cited by 39 publications

(19 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [8], Guariniello et al modified the Functional Dependency Network Analysis to make it applicable for SoS to analyze the internal and external impact of cyber attacks on the SoS interdependencies. To perform the analysis, the SoS is represented as a directed network with nodes to represent the CSs or their capability and links to represent the dependencies with two values indicating the strength and criticality of each dependency.…”

Section: B Graph-based Approachesmentioning

confidence: 99%

“…Some of these vulnerabilities could be hidden or unknown, but plenty of them are known and not adequately addressed. Moreover, the consequences of such attacks on the SoS cannot be understood by means of the mere evaluation of the behavior of each single CS, but require an assessment of the effect of the interactions on the behavior of the whole SoS [8] [9].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis

Hachem

Chiprianov

Neto

et al. 2018

2018 13th Annual Conference on System of Systems Engineering (SoSE)

View full text Add to dashboard Cite

Security is an important concern for softwareintensive Systems-of-Systems (SoS). Architectural analysis for SoS secturity assessment should be performed at early stages of development. Such activity could prevent vulnerabilities and avoid potential cascading attack emergent behaviors, i.e., a succession of security vulnerabilities that emerge from individual constituents security fragilities, potentially causing interruption and collapse of SoS operation. Model simulation can prevent these issues by predicting, at design-time, how SoS will behave regarding its reaction to potential attacks. As security is a quality attribute, i.e., a property that comes up from the relation between software parts, software architecture analysis and simulation are an additional support for the prediction of SoS security. However, despite recent advances in such area, few simulation approaches have tackled simulation of secure SoS architectures where the basis of the described models are the SoS behavior or the interactions among the SoS Constituent Systems (CS). The main contribution of this paper is offering a big picture of how recent advances on SoS security analysis via simulations can form a robust framework for SoS security prediction. We argue the pertinence of Multi-Agent Systems (MAS) for SoS simulation due to similarities between MAS and SoS concepts, and we report how MAS simulation enables the visualization of emergent behaviors and how they impact the SoS security. Our results to foster SoS security analysis include (i) an extension of a MAS conceptual model and platform to include security concepts, (ii) a Model-Driven Engineering (MDE) approach that adopts automatic mappings between secure SoS architecture modeled using an existing SysML-based modeling language, namely the SoSSecML, and (iii) a MAS platform to support such analysis.

show abstract

Section: B Graph-based Approachesmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis

Hachem

Chiprianov

Neto

et al. 2018

2018 13th Annual Conference on System of Systems Engineering (SoSE)

View full text Add to dashboard Cite

show abstract

“…Functional dependency network analysis is a way to model and measure the dependencies between the various elements within the system [1]. In recent years, FDNA technology has been applied to the maintenance and architecture analysis of aeronautical systems [2], to solve the problem of information transfer in collaborative satellite networks [3], technology development of R & D process modeling [4] and security analysis of satellite navigation systems [5,6] and other areas. This approach will provide new ideas for the study of maintenance support system constitution and maintenance concepts.…”

Section: Introductionmentioning

confidence: 99%

Maintenance Support System Constitution Analysis Based on FNDA

Fu¹,

Hao²

2017

dtetr

View full text Add to dashboard Cite

A main battle equipment is often followed by a large maintenance support system as a support. It becomes a key part of the war to win whether the maintenance of the operation of the system is smooth. This paper introduces the idea of functional dependency network analysis (FDNA). This approach will provide new ideas for the study of maintenance support system constitution and maintenance concepts.

show abstract

“…1) It is rare that an attacker exploits a single vulnerability on a single target system to achieve its objective, in most cases he uses several single attacks on several systems to accomplish his attack [10]. 2) "The consequences of attacks on the SoS cannot be understood by means of the merely evaluation of the behavior of the single systems, but require an assessment of the effect of the inter-dependencies on the behavior of the whole SoS" [11]. We define a cascading attack as a succession of possible single attacks or a sequence of exploited vulnerabilities resulting from the CS inter-dependencies employed for the achievement of the SoS global goal.…”

Section: Introductionmentioning

confidence: 99%

Model Driven Software Security Architecture of Systems-of-Systems

Hachem

Pang

Chiprianov

et al. 2016

2016 23rd Asia-Pacific Software Engineering Conference (APSEC)

View full text Add to dashboard Cite

Recently, there is a growing interest in Systems of Systems (SoS), their architecture, security and application domains. However, their specific characteristics such as the operational independence of SoS constituent systems (CS), the absence of central authority and their emergent behavior make the modeling of their structure, behavior and security a complex task. One of the current main security challenges in the context of SoS is the cascading attack problem. The challenge is to predict the concatenation/sequence of CS's vulnerabilities that could be triggered resulting in destructive cascading failures and take corrective actions to reduce the cost, development time and effect of later changes. In this paper, we propose a domain specific modeling language (DSML) to represent SoS security architecture. Having SoS security models will enable the discovery, analysis and resolution of cascading attacks, in the architecture phase, preventing development time and cost wastage. Following a Model Driven Engineering (MDE) approach, we generate a graphical editor for our DSML and use it to model a Smart Campus case study.

show abstract

Communications, Information, and Cyber Security in Systems-of-Systems: Assessing the Impact of Attacks through Interdependency Analysis

Cited by 39 publications

References 6 publications

Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis

Extending a Multi-Agent Systems Simulation Architecture for Systems-of-Systems Security Analysis

Maintenance Support System Constitution Analysis Based on FNDA

Model Driven Software Security Architecture of Systems-of-Systems

Contact Info

Product

Resources

About