Abstract:Concerns for the resilience of Cyber-Physical Systems (CPS)s in critical infrastructure are growing. CPS integrate sensing, computation, control, and networking into physical objects and mission-critical services, connecting traditional infrastructure to internet technologies. While this integration increases service efficiency, it has to face the possibility of new threats posed by the new functionalities. This leads to cyber-threats, such as denial-of-service, modification of data, information leakage, spreading of malware, and many others. Cyber-resilience refers to the ability of a CPS to prepare, absorb, recover, and adapt to the adverse effects associated with cyber-threats, e.g., physical degradation of the CPS performance resulting from a cyber-attack. Cyber-resilience aims at ensuring CPS survival by keeping the core functionalities of the CPS in case of extreme events. The literature on cyber-resilience is rapidly increasing, leading to a broad variety of research works addressing this new topic. In this article, we create a systematization of knowledge about existing scientific efforts of making CPSs cyber-resilient. We systematically survey recent literature addressing cyber-resilience with a focus on techniques that may be used on CPSs. We first provide preliminaries and background on CPSs and threats, and subsequently survey state-of-the-art approaches that have been proposed by recent research work applicable to CPSs. In particular, we aim at differentiating research work from traditional risk management approaches based on the general acceptance that it is unfeasible to prevent and mitigate all possible risks threatening a CPS. We also discuss questions and research challenges, with a focus on the practical aspects of cyber-resilience, such as the use of metrics and evaluation methods as well as testing and validation environments.

Cyber Risk Assessment for Cyber-Physical Systems: A Review of Methodologies and Recommendations for Improved Assessment Effectiveness

Cyber-physical System Risk Assessment

Cyber-physical systems security: A systematic review

Resilience analysis of cyber-physical systems: A review of models and methods

Risk Assessment Method for Cyber Security of Cyber Physical Systems

A Survey on Cyber-Resilience Approaches for Cyber-Physical Systems

Resilient Cyberphysical Systems and their Application Drivers: A Technology Roadmap

Cyber physical systems design, methodology, and integration: the current status and future outlook

Cyber Physics System: A Review

A survey on the security of cyber physical systems

Asset criticality and risk prediction for an effective cybersecurity risk management of cyber-physical system

Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Security Issues of Cyber Physical System: A Review

Security Modelling for Cyber-Physical Systems: A Systematic Literature Review

Dynamic Risk Management in Cyber Physical Systems

A Survey on Cyber-Physical Systems Security

Cyber-Physical Systems Security -- A Survey

Cyber-Resilience Evaluation of Cyber-Physical Systems

Review on Testing of Cyber Physical Systems: Methods and Testbeds

Research Survey on Security Issues in Cyber-Physical Systems