Cyber-Resilience Evaluation of Cyber-Physical Systems

Abstract

Concerns for the resilience of Cyber-Physical Systems (CPS) in critical infrastructure are growing. CPS integrate sensing, computation, control and networking into physical objects and mission-critical services, connecting traditional infrastructure to internet technologies.While this integration increases service efficiency, it has to face the possibility of new threats posed by the new functionalities. This leads to cyber-threats, such as denial-of-service, modification of data, information leakage, spreading of malware, and many others.Cyber-resilience refers to the ability of a CPS to prepare, absorb, recover, and adapt to the adverse effects associated with cyber-threats, e.g., physical degradation of the CPS performance resulting from a cyber-attack. Cyber-resilience aims at ensuring CPS survival, by keeping the core functionalities of the CPS in case of extreme events. The literature on cyber-resilience is rapidly increasing, leading to a broad variety of research works addressing this new topic. In this article, we create a systematization of knowledge about existing scientific efforts of making CPS cyber-resilient. We systematically survey recent literature addressing cyber-resilience with a focus on techniques that may be used on CPS. We first provide preliminaries and background on CPS and threats, and subsequently survey state-of-the-art approaches that have been proposed by recent research work applicable to CPS. In particular, we aim at differentiating research work from traditional risk management approaches, based on the general acceptance that it is unfeasible to prevent and mitigate all possible risks threatening a CPS. We also discuss questions and research challenges, with a focus on the practical aspects of cyber-resilience, such as the use of metrics and evaluation methods, as well as testing and validation environments.

Organisational Cyber Resilience: Management Perspectives

“…As resilience refers to the capacity of systems and organisations to absorb changes during adverse situations (Annarelli et al, 2020;Segovia et al,2020), it is a primary enabler to cope with, adapt to, and recover from disturbance (Béné et al, 2014;Hausken, 2020). Resilience in an organisational context is applied in two ways-engineering and ecological-each of which results in a different approach to deal with threats.…”

Towards Smarter Security Orchestration and Automatic Response for CPS and IoT

“…The 14 existing SOAR approaches surveyed in Table I have mainly focused on a specific layer of systems such as IDS (papers [1], [10], [14]), network layer ([1], [7], [11], [12], [14]), or application layer ( [4], [3], [9]), or very specific mechanisms for resilience of CPS ( [5], [6], [11]). There is a lack of a systematic approach for SOAR for the multi-layered systems using IoT/CPS, computing continuum perspective.…”

On the Stability of Cyber-Physical Control Systems With Sensor Multiplicative Attacks

“…Mainly, the synthesis of new resilient controllers based on a series of techniques guarantees stability as part of the process, but not many authors have been interested in what happens to legacy cyber-physical control systems under attacks. However, in a recent work [15], the authors define some metrics to quantify the cyber-resilience level based on the design, structure, stability, and performance under the attack of a given CPS. The metrics provide reference points to evaluate whether the system is better prepared or not to face the adversaries.…”