Abstract:Recently issues about cyber-war have gained relevant attention, especially because of gravity of damages that could be caused by cyber attacks to strategic targets, mining security of citizens. Examples of targets might include national civil and military airports, command and control systems of civil and military transportation means electronic military systems for national defense, national infrastructures for water and electricity distribution, industries and also hospitals or firefighters informatics systems. The risk of cyber attacks for the mentioned systems and infrastructures has grown because of the introduction of general-purpose and open (not proprietary)communication protocols, widely interconnecting systems and services. With this regard, it is of great importance the problem of evaluating the impact that cyber attacks could generate and to select effective countermeasures to protect military and civil heterogeneous and interconnected systems. In this paper the Mixed Holistic Reductionist (MHR) model is proposed as a conceptual methodology to evaluate the impact of a set of cyber attacks to military and civil infrastructures of strategic interest. The reductionist approach allows modeling of heterogeneous systems using the simplest elements and then coming to assess the interaction of basic components. The holistic paradigm instead allows to analyze complex systems by evaluating their behavior in complex and thus as a monolithic unit. This model allows combining the holistic method with the reductionist, trying to maintain the benefits of both paradigms. The two methods are linked together through an additional layer which is an intermediate level of abstraction, usually represented by the services of any infrastructure. Services are defined as logical objects, in order to obtain useful functionality to the customer, or other infrastructure. The validity of MHR model has been already tested within the context of Critical Infrastructure protection. In particular, it has been implemented in CISIA, a system-interdependency simulator, developed by “Roma Tre”University. In this work, the effectiveness of the model is studied with regard to government infrastructure protection from cyber attacks and, with this regard, an explicative case study is presented.

Critical Infrastructure Protection: having SIEM technology cope with network heterogeneity

Closing the loop of SIEM analysis to Secure Critical Infrastructures

Modeling and Defending Advanced Metering Infrastructure Subjected to Distributed Denial-of-Service Attacks

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Toward the Integration of Cyber and Physical Security Monitoring Systems for Critical Infrastructures

Critical infrastructure monitoring in CBRNe scenarios: a reliable and robust communication network for distributed multimodal sensors

Innovative solutions for critical infrastructure resilience against cyber-physical attacks

Survey on Intrusion Detection Systems Based on Machine Learning Techniques for the Protection of Critical Infrastructure

Vulnerabilities and Attacks Against Industrial Control Systems and Critical Infrastructures

Modern Problems Require Modern Solutions: Hybrid Concepts for Industrial Intrusion Detection

Review of Security Issues in Industrial Networks

ICSrange: A Simulation-based Cyber Range Platform for Industrial Control Systems

URBAN-NET: A Network-Based Infrastructure Monitoring and Analysis System for Emergency Management and Public Safety.

Integrated protection of industrial control systems from cyber-attacks: the ATENA approach

Mixed Holistic Reductionistic Approach for Impact Assessment of Cyber Attacks

A Firewall Optimization for Threat-Resilient Micro-Segmentation in Power System Networks

A Survey on Intrusion Detection System for Advanced Metering Infrastructure

Hybrid Intrusion Detection System Design for Distributed Energy Resource Systems

Integration of Cyber Threat Intelligence into Security Onion and Malcolm for the use case of industrial networks

Towards anomaly detection in smart grids by combining Complex Events Processing and SNMP objects

Multidimensional Intrusion Detection System for IEC 61850-Based SCADA Networks