Hierarchical, model-based risk management of critical infrastructures

Abstract

Risk management is a process that includes several steps, from vulnerability analysis to the formulation of a risk mitigation plan that selects countermeasures to be adopted. With reference to an information infrastructure, we present a risk management strategy that considers a sequence of hierarchical models, each describing dependencies among infrastructure components. A dependency exists any time a security related attribute of a component depends upon the attributes of other components. We discuss how this notion supports the formal definition of risk mitigation plan and the evaluation of the infrastructure robustness. A hierarchical relation exists among models that are analyzed because each model increases the level of details of some components in a previous one. Since components and dependencies are modeled through a hypergraph, to increase the model detail level, some hypergraph nodes are replaced by more and more detailed hypergraphs. We show how critical information for the assessment can be automatically deduced from the hypergraph and define conditions that determine cases where a hierarchical decomposition simplifies the assessment. In these cases, the assessment has to analyze the hypergraph that replaces the component rather than applying again all the analyses to a more detailed, and hence larger, hypergraph. We also show how the proposed framework supports the definition of a risk mitigation plan and discuss some indicators of the overall infrastructure robustness. Lastly, the development of tools to support the assessment is discussed.

Robustness analysis of industrial emergency plans: a model-based methodology

“…These components can be analyzed separately, and the results integrated into the analysis, while maintaining the global model of the system being studied. This helps increase the level of depth of the analysis, while making scale economies in overall analysis time [24].…”

Modeling and Managing Risk in Billing Infrastructures

“…This section briefly describes a billing infrastructure, which corresponds to an abstract model of an ICT infrastructure [1,2,15]. A billing infrastructure is characterized by the types of attacks and their impact on the infrastructure rather than the specific ICT components used in the infrastructure.…”

“…A billing infrastructure is an ICT infrastructure that is designed, constructed and managed to bill a large set of customers for services they access or consume. Such an infrastructure comprises a set of peripheral nodes and an intelligent backbone [2]. An example is a metering infrastructure in which the peripheral nodes measure the amount of a good (e.g., water or electricity) distributed to customers, and the backbone records, delivers and updates customer bills [9].…”

Anomaly detection in SCADA systems : a network based approach

“…For instance, attack taxonomies have been proposed for two popular SCADA protocols, Modbus [77] and DPN3 [52]. The problem of threat analysis, that is, evaluating the impact that attacks and failures have in the controlled infrastructures, has been studied in [6,7,31,140]. In addition to threat analysis, Baiardi et al [7] also discuss mitigation strategies.…”

“…The problem of threat analysis, that is, evaluating the impact that attacks and failures have in the controlled infrastructures, has been studied in [6,7,31,140]. In addition to threat analysis, Baiardi et al [7] also discuss mitigation strategies. Ten et al [140] proposes an even more complete solution, including monitoring, detection, threat analysis and mitigation.…”