Developing Models for Physical Attacks in Cyber-Physical Systems

Cheh, Carmen; Keefe, Ken; Feddersen, Brett; Chen, Binbin; Temple, William G.; Sanders, William H.

doi:10.1145/3140241.3140249

Cited by 14 publications

(10 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Some smart sectors including smart healthcare and smart citizen were addressed only by a small number of studies, see Figure 12; it is critical that future research recognises this limitation. It is also evident that interest is growing in cross-sector proposals and an interdisciplinary approach to solve real-life problems including cybercrime [39,51,[63][64][65][100][101][102]111,131,134]. Going forward, an interdisciplinary approach across smart sectors and aggregated sharing of CTI from multiple sources could increase situational awareness and provide a detailed, real-time and measurable body-of-knowledge to deal with the increased sophistication and coordination of cyberattacks.…”

Section: Discussionmentioning

confidence: 99%

“…The results show that some studies address more than one smart sector [104,120,124,126,133,145] or aim to diversify their future research [39,51,[63][64][65]100,102,111,131,134]. For example, reference [145] explores smart support for independent living of the elderly within the community to maximise their independence whilst maintaining the ability to deal with their complex medical needs across The scientific community focused the research on smart infrastructure, followed by smart mobility and smart security sectors whilst smart healthcare and smart citizen were addressed only by a small number of studies, see Figure 12.…”

Section: Analysis Of Primary Studies Cross-sector Proposals or Applications To Improve Digital Forensicsmentioning

confidence: 96%

“…In addition to frameworks, we investigate how complex systems support cyber resilience identifying commonalities. Within the many diverse definitions used in existing studies addressing smart cities [7][8][9][10][11][12] and the numerous terminologies used in literature to describe frameworks and systems [51,52,[63][64][65], providing an answer to RQ1 helps us conclude a list of all existing and relevant frameworks and systems that address CPSs in smart cities supporting cyber resilience as defined by the scope of this SLR. RQ2: How do the identified frameworks and systems in smart cities address modern digital forensics and incident response (DFIR)?…”

Section: Research Questions and Rationalementioning

confidence: 99%

“…The results show that some studies address more than one smart sector [104,120,124,126,133,145] or aim to diversify their future research [39,51,[63][64][65]100,102,111,131,134]. For example, reference [145] explores smart support for independent living of the elderly within the community to maximise their independence whilst maintaining the ability to deal with their complex medical needs across multiple smart sectors including healthcare, homes and infrastructure.…”

Section: Analysis Of Primary Studies Cross-sector Proposals or Applications To Improve Digital Forensicsmentioning

confidence: 99%

See 3 more Smart Citations

Cyber Resilience and Incident Response in Smart Cities: A Systematic Literature Review

et al. 2020

View full text Add to dashboard Cite

The world is experiencing a rapid growth of smart cities accelerated by Industry 4.0, including the Internet of Things (IoT), and enhanced by the application of emerging innovative technologies which in turn create highly fragile and complex cyber–physical–natural ecosystems. This paper systematically identifies peer-reviewed literature and explicitly investigates empirical primary studies that address cyber resilience and digital forensic incident response (DFIR) aspects of cyber–physical systems (CPSs) in smart cities. Our findings show that CPSs addressing cyber resilience and support for modern DFIR are a recent paradigm. Most of the primary studies are focused on a subset of the incident response process, the “detection and analysis” phase whilst attempts to address other parts of the DFIR process remain limited. Further analysis shows that research focused on smart healthcare and smart citizen were addressed only by a small number of primary studies. Additionally, our findings identify a lack of available real CPS-generated datasets limiting the experiments to mostly testbed type environments or in some cases authors relied on simulation software. Therefore, contributing this systematic literature review (SLR), we used a search protocol providing an evidence-based summary of the key themes and main focus domains investigating cyber resilience and DFIR addressed by CPS frameworks and systems. This SLR also provides scientific evidence of the gaps in the literature for possible future directions for research within the CPS cybersecurity realm. In total, 600 papers were surveyed from which 52 primary studies were included and analysed.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Analysis Of Primary Studies Cross-sector Proposals or Applications To Improve Digital Forensicsmentioning

confidence: 96%

Section: Research Questions and Rationalementioning

confidence: 99%

“…The results show that some studies address more than one smart sector [104,120,124,126,133,145] or aim to diversify their future research [39,51,[63][64][65]100,102,111,131,134]. For example, reference [145] explores smart support for independent living of the elderly within the community to maximise their independence whilst maintaining the ability to deal with their complex medical needs across multiple smart sectors including healthcare, homes and infrastructure.…”

Section: Analysis Of Primary Studies Cross-sector Proposals or Applications To Improve Digital Forensicsmentioning

confidence: 99%

See 2 more Smart Citations

Cyber Resilience and Incident Response in Smart Cities: A Systematic Literature Review

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Several approaches have been proposed in the literature to study attack graphs and the analysis of attack paths within IT infrastructures [9]. The ADversary VIew Security Evaluation (ADVISE) meta modeling approach was used in [10] to facilitate the understating of attack paths within cyber-physical systems. A set of algorithms were proposed in [11] to facilitate the analysis of attack paths and to prioritize them taking into account the system's vulnerabilities.…”

Section: Related Workmentioning

confidence: 99%

Attack Path Analysis and Cost-Efficient Selection of Cybersecurity Controls for Complex Cyberphysical Systems

Σπαθούλας

Kavallieratos

Katsikas

et al. 2022

Computer Security. ESORICS 2021 International Workshops

View full text Add to dashboard Cite

The increasing integration of information technology with operational technology leads to the formation of Cyber-Physical Systems (CPSs) that intertwine physical and cyber components and connect to each other. This interconnection enables the offering of functionality beyond the combined offering of each individual component, but at the same time increases the cyber risk of the overall system, as such risk propagates between and aggregates at component systems. The complexity of the resulting systems in many cases leads to difficulty in analyzing cyber risk. Additionally, the selection of cybersecurity controls that will effectively and efficiently treat the cyber risk is commonly performed manually, or at best with limited automated decision support. In this paper, we extend our previous work in [1] to analyze attack paths between CPSs on one hand, and we improve the method proposed therein for selecting a set of security controls that minimizes both the residual risk and the cost of implementation. We use the DELTA demand-response management platform for the energy market stakeholders such as Aggregators and Retailers [2] as a use case to illustrate the workings of the proposed approaches. The results are sets of cybersecurity controls applied to those components of the overall system that have been identified to lie in those attack paths that have been identified as most critical among all the identified attack paths.

show abstract