Development and Analysis of P2SCP: A Paradigm for Penetration Testing of Systems that Cannot be Subjected to the Risk of Penetration Testing

Jeremy Straub

2023-06-07

Abstract:Penetration testing increases the security of systems through tasking testers to 'think like the adversary' and attempt to find the ways that an attacker would break into the system. For many systems, this can be conducted in a safe and controlled way; however, some systems are so critical to human life and safety that the risk of their failure or disablement due to active penetration testing cannot be assumed. These systems are also critical to evaluate the security of, to prevent attackers from disabling them or causing their maloperation; however, this must be done in a manner that doesn't risk the very malady that testing seeks to avoid through the testing process itself. This paper presents P2SCP, a paradigm for penetration testing of systems that cannot be subjected to the risk of penetration testing. It discusses how data collection, the creation of digital twins and cousins and evaluative analysis can be utilized to conduct virtual penetration tests on critical infrastructure systems. This proposed paradigm is analyzed through the use of several case studies.

Cryptography and Security

What problem does this paper attempt to address?

The problem this paper attempts to address is: how to conduct security assessments for critical systems that cannot afford the risks associated with traditional penetration testing.

Specifically, many critical infrastructure systems (such as water supply, power generation and distribution, natural gas, etc.) are essential for human life and safety, and their operation must be reliable and continuous. However, traditional penetration testing methods carry certain risks that may lead to system failures or shutdowns, resulting in severe consequences. For example, conducting penetration testing on power distribution facilities in winter could put residents at risk of freezing to death. Therefore, while these critical systems need to be assessed for security to prevent attacks, they cannot undergo traditional penetration testing directly.

To solve this problem, the paper proposes a new penetration testing paradigm—P2SCP (Penetration Testing for Systems that Cannot be Subjected to the Risk of Penetration Testing). This approach achieves virtual penetration testing of critical infrastructure systems through data collection, digital twins, the creation of similar systems, and evaluation analysis. This method allows for the assessment of system security without actually affecting the system's operation.