Using hybrid attack graphs to model cyber-physical attacks in the Smart Grid

Hawrylak, Peter J.; Haney, Michael; Papa, Mauricio; Hale, John

doi:10.1109/isrcs.2012.6309311

Cited by 34 publications

(14 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A close work representing CPS incidents is proposed by Hawrylak et al [19]. In this work, the authors develop Hybrid Attack Graph (HAG) to model cyber-physical attacks.…”

Section: Related Workmentioning

confidence: 99%

I've seen this before

Alrimawi

Pasquale

Mehta

et al. 2018

Proceedings of the 1st International Workshop on Security Awareness From Design to Deployment

View full text Add to dashboard Cite

An increasing number of security incidents in cyber-physical systems (CPSs) arise from the exploitation of cyber and physical components of such systems. Knowledge about how such incidents arose is rarely captured and used systematically to enhance security and support future incident investigations. In this paper, we propose an approach to represent and share incidents knowledge. Our approach captures incident patterns -common aspects of incidents occurring in different CPSs. Our approach then allows incident patterns to be instantiated for different systems to assess if and how such patterns can manifest again. To support our approach, we provide two meta-models that represent, respectively, incident patterns and the cyber-physical systems themselves. The incident meta-model captures the characteristics of incidents, such as assets and activities. The system meta-model captures cyber and physical components and their interactions, which may be exploited during an incident. We demonstrate the feasibility of our approach in the application domain of smart buildings, by tailoring the system meta-model to represent components and interactions in this domain. CCS CONCEPTS• Software and its engineering → Model-driven software engineering KEYWORDS

show abstract

“…A close work representing CPS incidents is proposed by Hawrylak et al [19]. In this work, the authors develop Hybrid Attack Graph (HAG) to model cyber-physical attacks.…”

Section: Related Workmentioning

confidence: 99%

I've seen this before

Alrimawi

Pasquale

Mehta

et al. 2018

Proceedings of the 1st International Workshop on Security Awareness From Design to Deployment

View full text Add to dashboard Cite

show abstract

“…Modeling attacks on real systems has great significance [55]. Peter J. Hawrylak, et al, provide a novel method to model cyber-physical attacks in smart grid with hybrid attack graphs [52].…”

Section: Attack Modelingmentioning

confidence: 99%

“…Diverse cyber -physical attacks on smart grid and mitigations are discussed in [81][82][83][84][52][53]. Attack Detection in smart grid is focused and studied in [49,18,69].…”

Section: Power Network Securitymentioning

confidence: 99%

Towards a Framework for Assuring Cyber Physical System Security

Lu¹,

Zhao²,

Zhao³

et al. 2015

IJSIA

View full text Add to dashboard Cite

show abstract

“…Recently, malicious attacks become significant and potential triggers of cascading failures. For instance, there are increasing evidences of malicious intention and actions that aim to destruct the US power systems [5]- [7]. Such attacks are similar to the attacks in computer networks [8], [9].…”

Section: Synmentioning

confidence: 99%

Resilience Analysis of Power Grids Under the Sequential Attack

Zhu

Yan

Tang

et al. 2014

IEEE Trans.Inform.Forensic Secur.

113

View full text Add to dashboard Cite

The modern society increasingly relies on electrical service, which also brings risks of catastrophic consequences, e.g., large-scale blackouts. In the current literature, researchers reveal the vulnerability of power grids under the assumption that substations/transmission lines are removed or attacked synchronously. In reality, however, it is highly possible that such removals can be conducted sequentially. Motivated by this idea, we discover a new attack scenario, called the sequential attack, which assumes that substations/transmission lines can be removed sequentially, not synchronously. In particular, we find that the sequential attack can discover many combinations of substation whose failures can cause large blackout size. Previously, these combinations are ignored by the synchronous attack. In addition, we propose a new metric, called the sequential attack graph (SAG), and a practical attack strategy based on SAG. In simulations, we adopt three test benchmarks and five comparison schemes. Referring to simulation results and complexity analysis, we find that the proposed scheme has strong performance and low complexity.

show abstract

Using hybrid attack graphs to model cyber-physical attacks in the Smart Grid

Cited by 34 publications

References 19 publications

I've seen this before

I've seen this before

Towards a Framework for Assuring Cyber Physical System Security

Resilience Analysis of Power Grids Under the Sequential Attack

Contact Info

Product

Resources

About