Simulation-Based Cyber-Attack Assessment of Critical Infrastructures

Rybnicek, Marlies; Tjoa, Simon; Poisel, Rainer

doi:10.1007/978-3-662-44860-1_8

Cited by 5 publications

(2 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Researchers are active in simulating cyberattacks in critical infrastructures, using Network simulator NS2 to predict the impact of Denial of Service (DoS), malware propagation, and Man-in-The-Middle attacks on Supervisory Control and Data Acquisition (SCADA) Systems (Ciancamerla, Minichino et al 2013). In addition, an agent-based modeling and simulation approach has been used by researchers to facilitate the assessment of critical infrastructure entities under cyberattack (Rybnicek, Tjoa et al 2014).…”

Section: State-of-the-art Of Currently Used Simulators In Railway For...mentioning

confidence: 99%

A cybersecurity Approach for Improved System Resilience

Kour,

Patwardhan,

Karim

et al. 2022

Book of Extended Abstracts for the 32nd European Safety and Reliability Conference

View full text Add to dashboard Cite

The ongoing digitalisation of industrial systems is bringing new challenges in managing, monitoring, and predicting the overall reliability performance. The overall reliability of a cyber-physical system, such as railways, is highly influenced by the level of resilience in its inherent digital items. The objective of this paper is to propose a systematic approach, based on an enhanced Cyber Kill Chain model, to improve the overall system resilience through monitoring and prediction. The proposed cybersecurity approach can be used to assess the future cyberattack penetration probabilities based on the present security controls. With the advancement in cybersecurity defensive controls, cyberattacks have continued to evolve through the exploitation of vulnerabilities within the cyber-physical systems. Assuming the possibility of a cyberattack it is necessary to select appropriate security controls so that this attack can be predicted, prevented, or detected before any catastrophic consequences to retain the resilience of the system. Insufficient cybersecurity in the context of cyber-physical systems, such as railways, might have a fatal effect on the whole system availability performance and sometimes may lead to safety risks. However, to improve the overall resilience of a cyber-physical system there is a need of a systematic approach to continuously monitor, predict, and manage the health of the system's digital items with respect to security. Furthermore, the paper will provide a case-study description in railway sector, which has been used for the verification of the proposed approach.

show abstract

Section: State-of-the-art Of Currently Used Simulators In Railway For...mentioning

confidence: 99%

A cybersecurity Approach for Improved System Resilience

Kour,

Patwardhan,

Karim

et al. 2022

Book of Extended Abstracts for the 32nd European Safety and Reliability Conference

View full text Add to dashboard Cite

show abstract

“…For example, agent-based modelling claims to be able to explore emergent behaviour, derived from simulations of behavioural rules and interactions of individual agents. Some applications to the security domain start to appear [7,21,31], but they are not specifically focused on discovering acceleration and discontinuities.…”

Section: Identifying and Evaluating Singularitiesmentioning

confidence: 99%

On Security Singularities

Pieters

2018

Proceedings of the New Security Paradigms Workshop

View full text Add to dashboard Cite

In future studies involving artificial intelligence, the so-called technological singularity is a key theme. It refers to a hypothetical point in the future where technological progress becomes automated through the creation of a new form of intelligence. Under the assumption of adversarial behaviour, this could pose an existential threat to humanity. More modestly, singularities and tipping points refer to thresholds beyond which the behaviour of a system changes in a qualitative way. The nonlinearity of the behaviour causes existing control mechanisms to become obsolete, guiding the system towards a new balance, if this exists. In this paper, we ask the question to what extent the notions of singularity and tipping point can contribute to an analysis of security in 2038. Can we expect to have seen such phenomena in twenty years time, and will they have changed our perception of what security entails? Or are they useless forms of speculation diverting our attention away from the day-to-day best practices that are needed to keep our basic security up-to-date? We discuss examples of singularity-style developments, characterise them in terms of acceleration mechanisms and discontinuities, and discuss whether and how these characteristics should be used to prepare ourselves. We conclude that a broad discussion on potential security singularities and associated general adaptation strategies is more useful than focusing on one big singularity.

show abstract

Predictive model for multistage cyber-attack simulation

Kour

Thaduri

Karim

2020

Int J Syst Assur Eng Manag

View full text Add to dashboard Cite

Adoption of information and communication technologies (ICT) in railway has improved the reliability, maintainability, operational efficiency, capacity as well as the comfort of passengers. This adoption introduces new vulnerabilities and entry points for hackers to launch attacks. Advanced cybersecurity threats with automated capabilities are increasing in such sectors as finance, health, grid, retail, government, telecommunications, transportation, etc. These cyber threats are also increasing in railways and, therefore, it needs for cybersecurity measures to predict, detect and respond these threats. The cyber kill chain (CKC) model is a widely used model to detect cyber-attacks and it consists of seven stages/chains; breaking the chain at an early stage will help the defender stop the adversary's malicious actions. Due to lack of real cybersecurity data, this research simulates cyber-attacks to calculate the attack penetration probabilities at each stage of the cyber kill chain model. The objective of this research is to predict cyber-attack penetrations by implementing various security controls using modeling and simulation. This research is an extension of developed railway defender kill chain which provides security controls at each stage of CKC for railway organizations to minimize the risk of cyber threats.

show abstract

Simulation-Based Cyber-Attack Assessment of Critical Infrastructures

Cited by 5 publications

References 14 publications

A cybersecurity Approach for Improved System Resilience

A cybersecurity Approach for Improved System Resilience

On Security Singularities

Predictive model for multistage cyber-attack simulation

Contact Info

Product

Resources

About