Modeling safety and security interdependencies with BDMP (Boolean logic Driven Markov Processes)

Piètre-Cambacédès, Ludovic; Bouissou, Marc

doi:10.1109/icsmc.2010.5641922

Cited by 51 publications

(33 citation statements)

References 34 publications

(46 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Prior work in this area similarly represents attacks as developing progressively. It is thus commonly based on attack trees or graphs, Markov processes, state space models, Bayesian networks, etc., (31,(71)(72)(73) in which the central feature is that being in one state gives access to another.…”

Section: The Attack Affordance Graphmentioning

confidence: 99%

Analysis of Affordance, Time, and Adaptation in the Assessment of Industrial Control System Cybersecurity Risk

2017

View full text Add to dashboard Cite

Industrial control systems increasingly use standard communication protocols and are increasingly connected to public networks-creating substantial cybersecurity risks, especially when used in critical infrastructures such as electricity and water distribution systems. Methods of assessing risk in such systems have recognized for some time the way in which the strategies of potential adversaries and risk managers interact in defining the risk to which such systems are exposed. But it is also important to consider the adaptations of the systems' operators and other legitimate users to risk controls, adaptations that often appear to undermine these controls, or shift the risk from one part of a system to another. Unlike the case with adversarial risk analysis, the adaptations of system users are typically orthogonal to the objective of minimizing or maximizing risk in the system. We argue that this need to analyze potential adaptations to risk controls is true for risk problems more generally, and we develop a framework for incorporating such adaptations into an assessment process. The method is based on the principle of affordances, and we show how this can be incorporated in an iterative procedure based on raising the minimum period of risk materialization above some threshold. We apply the method in a case study of a small European utility provider and discuss the observations arising from this.

show abstract

Section: The Attack Affordance Graphmentioning

confidence: 99%

Analysis of Affordance, Time, and Adaptation in the Assessment of Industrial Control System Cybersecurity Risk

2017

View full text Add to dashboard Cite

show abstract

“…Two basic ways of cross-fertilization include unified and harmonization. Unified methods [3], [4], [5], [6] use the same assessment method, models, and tools to estimate both safety and security of a system. Harmonization methods preserve and compare between the methods, models, and tools for safety and security.…”

Section: Related Workmentioning

confidence: 99%

“…Harmonization methods preserve and compare between the methods, models, and tools for safety and security. The Boolean logic Driven Markov Process (BDMP) [5] and the unified framework [6] are typical examples of the unified process. Our work in this article adopts the unified approach, while focusing on the case study of real-world systems.…”

Section: Related Workmentioning

confidence: 99%

Unified Security and Safety Risk Assessment - A Case Study on Nuclear Power Plant

Chen

Hsiung

et al. 2014

2014 International Conference on Trustworthy Systems and Their Applications

View full text Add to dashboard Cite

Critical systems have very stringent requirements on both security and safety. Recent mishaps such as the missing MH370 aircraft and the sunk Korean Sewol ferry go to show that our technology in safety and security risk assessment still need a more integrated approach. Nuclear plant meltdown in the recent Fukushima accident is also a typical example of insufficient risk assessments. This work is a case study on how a unified security and safety risk assessment methodology may be applied to a High Pressure Core Flooder (HPCF) system in a nuclear power plant. Individual risk security or safety assessments may overlook the possible higher risk associated with such critical systems. The case study shows how the proposed method provides a more accurate risk assessment compared to individual assessments.

show abstract

“…Besides the one applied by us [11], Chang et al propose improvements for efficient broadcast authentication in wireless sensor networks [5]. An approach and tool for modeling safety and security interdependencies via Boolean logic Driven Markov Processes (BDMP) is shown in [9], following the analysis method known from fault and attack trees. For the selected real-time protocol from [7], that paper also contains experimental measurement setups for IEEE 802.11.…”

Section: Related Workmentioning

confidence: 99%

Quantitative Safety and Security Analysis from a Communication Perspective

Malinowsky

Schwefel²,

Jung³

2015

Proceedings of the 8th International Conference on Performance Evaluation Methodologies and Tools

View full text Add to dashboard Cite

This paper introduces and exemplifies a trade-off analysis of safety and security properties in distributed systems. The aim is to support analysis for real-time communication and authentication building blocks in a wireless communication scenario. By embedding an authentication scheme into a real-time communication protocol for safety-critical scenarios, we can rely on the protocol's individual safety and security properties. The resulting communication protocol satisfies selected safety and security properties for deployment in safety-critical use-case scenarios with security requirements. We look at handover situations in a IEEE 802.11 wireless setup between mobile nodes and access points. The tradeoffs involve application-layer data goodput, probability of completed handovers, and effect on usable protocol slots, to quantify the impact of security from a lower-layer communication perspective on the communication protocols. The results are obtained using the network simulator ns-3.

show abstract

Modeling safety and security interdependencies with BDMP (Boolean logic Driven Markov Processes)

Cited by 51 publications

References 34 publications

Analysis of Affordance, Time, and Adaptation in the Assessment of Industrial Control System Cybersecurity Risk

Analysis of Affordance, Time, and Adaptation in the Assessment of Industrial Control System Cybersecurity Risk

Unified Security and Safety Risk Assessment - A Case Study on Nuclear Power Plant

Quantitative Safety and Security Analysis from a Communication Perspective

Contact Info

Product

Resources

About