Enhancing Decision Support with Interdependency Modeling

Masucci, Dario; Palazzo, Cosimo; Foglietta, Chiara; Panzieri, Stefano

doi:10.1007/978-3-319-48737-3_10

Cited by 3 publications

(3 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Then, they are ranked using a multi-criteria decision making algorithm that mimics the operator behavior. The multi-criteria decision making algorithm [43], [50] is a heuristic for multi-objective optimization problems that rank different alternatives (i.e., configurations) based on several criteria. One of the reason why we choose this method is related to the ability to change ranking based on different priority of the operator, by means of changing the criteria weights.…”

Section: Cisiapro Resultsmentioning

confidence: 99%

From Detecting Cyber-Attacks to Mitigating Risk Within a Hybrid Environment

Foglietta

Masucci

Palazzo

et al. 2019

IEEE Systems Journal

Self Cite

View full text Add to dashboard Cite

Telecommunication networks based on commonplace technologies (such as Ethernet) often constitute a vulnerable attack vector against modern Critical Infrastructures (CIs), particularly for Supervisory Control and Data Acquisition (SCADA) systems, which rely on them for monitoring and controlling physical components. This article presents a unique platform that encompasses a range of capabilities, from cyber attack detection to mitigation strategies, through interdependency and risk evaluation. The platform is made of two main components: a cyber attack detection subsystem and a risk assessment framework. Both blocks are innovative from a research point of view and they have been developed and customized to fit the CIs' features, that are completely different from telecommunication networks. This platform has been tested on a hybrid environment testbed, made of virtual and real components, within the scope of the EU FP7 CockpitCI and EU H2020 ATENA projects. The case study corresponds to a medium voltage power grid controlled by a SCADA control center, where the platform has been validated with optimal results in terms of detection capabilities and time response. Index Terms-cyber attack detection risk assessment, decision support systems, cyber-physical systems, supervisory control and data acquisition (SCADA) I. INTRODUCTION T HE concept of Critical Infrastructure has been changing over the past years. This notion, which was mainly related to the public sector during the 1980s [1], was redefined as a matter of national security [2] during the 1990s, and particularly after 9/11. This comes as no surprise, as CIs are the key assets, systems or networks of our lives; their partial destruction would have a negative effect on security, economy and public health. With time, the definition of CI has been extended to include other services. The concept of "lifeline system" was developed to evaluate large and geographically distributed networks, such as electric power, gas and liquid fuels, telecommunications, transportation, waste disposal and water supply. Thinking about CIs through the subset of lifelines helps clarify common

show abstract

Section: Cisiapro Resultsmentioning

confidence: 99%

From Detecting Cyber-Attacks to Mitigating Risk Within a Hybrid Environment

Foglietta

Masucci

Palazzo

et al. 2019

IEEE Systems Journal

Self Cite

View full text Add to dashboard Cite

show abstract

“…To this end, it improves the decision process by considering both the current and future states of the system. Moreover, it considers the cascading effects among interconnected infrastructures and the impact of cyber-threats [28]. The mitigation module is designed as a set of algorithms that suggests the reaction strategy to CI operators, based on multiple criteria.…”

Section: Mitigation Modulementioning

confidence: 99%

Integrated protection of industrial control systems from cyber-attacks: the ATENA approach

Adamsky

Aubigny

Battisti

et al. 2018

International Journal of Critical Infrastructure Protection

View full text Add to dashboard Cite

Industrial and Automation Control systems traditionally achieved security thanks to the use of proprietary protocols and isolation from the telecommunication networks. Nowadays, the advent of the Industrial Internet of Things poses new security challenges. In this paper, we first highlight the main security challenges that advocate for new risk assessment and security strategies.To this end we propose a security framework and advanced tools to properly manage vulnerabilities, and to timely react to the threats. The proposed architecture fills the gap between computer science and control theoretic approaches. The physical layers connected to Industrial Control Systems are prone to disrupt when facing cyber-attacks. Considering the modules of the proposed architecture, we focus on the development of a practical framework to compare information about physical faults and cyber-attacks. This strat-egy is implemented in the ATENA architecture which has been designed as an innovative solution for the protection of critical assets.

show abstract

“…CISIApro 2.0 (Critical Infrastructure Simulation by Interdependent Agents) [14,19] is a software engine capable of measuring complex cascading effects, taking into account (inter)dependencies and fault propagation among the complex systems concerned. CISIApro 2.0 may also suggest prevention and restoration steps determining their positive effects.…”

mentioning

confidence: 99%

Modeling Telecommunications Infrastructures Using the CISIApro 2.0 Simulator

Bernardini¹,

Foglietta²,

Panzieri³

2020

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

Telecommunications are an important part of our lives and they are a vital component of Industrial and Automation Control Systems (IACSs) that control Critical Infrastructures. Nowadays, the integration of IACS with the Information Technology system is a reality, mainly due to economic saves. However, this integration has lead to new troubles related to the spread of cyber threats which can be caused also damage to the physical infrastructures. Telecommunications are one of the possible reasons for which an adverse event on a single infrastructure can be amplified giving rise to high-impact crises.Modeling Critical infrastructures is a complex and multi-disciplinary problem that is mandatory to understand the domino effect on interdependent complex networks. CISIApro 2.0, an agent-based simulator, models interconnected infrastructures to assess the consequences of adverse events, such as failures, cyber-attacks, and natural disasters, and restoring actions. CISIApro 2.0 has been adapted to model telecommunication infrastructure, in terms of network routing and the allocation of differentiated services. CISIApro 2.0 is validated in a modern telecommunication network within the European H2020 RESISTO project. RE-SISTO helps communication infrastructures operators during the decision process exploiting the combined use of preparatory analyses, detection and reaction technologies in the physical and cyber domains.

show abstract

Enhancing Decision Support with Interdependency Modeling

Cited by 3 publications

References 18 publications

From Detecting Cyber-Attacks to Mitigating Risk Within a Hybrid Environment

From Detecting Cyber-Attacks to Mitigating Risk Within a Hybrid Environment

Integrated protection of industrial control systems from cyber-attacks: the ATENA approach

Modeling Telecommunications Infrastructures Using the CISIApro 2.0 Simulator

Contact Info

Product

Resources

About